iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net/tipc
History
Hoang Le 8b91d0dfc8 tipc: check attribute length for bearer name 
[ Upstream commit 7f36f798f89bf32c0164049cb0e3fd1af613d0bb ]

syzbot reported uninit-value:
=====================================================
BUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:644 [inline]
BUG: KMSAN: uninit-value in string+0x4f9/0x6f0 lib/vsprintf.c:725
 string_nocheck lib/vsprintf.c:644 [inline]
 string+0x4f9/0x6f0 lib/vsprintf.c:725
 vsnprintf+0x2222/0x3650 lib/vsprintf.c:2806
 vprintk_store+0x537/0x2150 kernel/printk/printk.c:2158
 vprintk_emit+0x28b/0xab0 kernel/printk/printk.c:2256
 vprintk_default+0x86/0xa0 kernel/printk/printk.c:2283
 vprintk+0x15f/0x180 kernel/printk/printk_safe.c:50
 _printk+0x18d/0x1cf kernel/printk/printk.c:2293
 tipc_enable_bearer net/tipc/bearer.c:371 [inline]
 __tipc_nl_bearer_enable+0x2022/0x22a0 net/tipc/bearer.c:1033
 tipc_nl_bearer_enable+0x6c/0xb0 net/tipc/bearer.c:1042
 genl_family_rcv_msg_doit net/netlink/genetlink.c:731 [inline]

- Do sanity check the attribute length for TIPC_NLA_BEARER_NAME.
- Do not use 'illegal name' in printing message.

Reported-by: syzbot+e820fdc8ce362f2dea51@syzkaller.appspotmail.com
Fixes: cb30a63384bc ("tipc: refactor function tipc_enable_bearer()")
Acked-by: Jon Maloy <jmaloy@redhat.com>
Signed-off-by: Hoang Le <hoang.h.le@dektech.com.au>
Link: https://lore.kernel.org/r/20220602063053.5892-1-hoang.h.le@dektech.com.au
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-06-14 18:11:56 +02:00
..
addr.c
tipc: initialise addr_trail_end when setting node addresses
2019-08-11 21:40:04 -07:00
addr.h
…
bcast.c
tipc: fix potential hanging after b/rcast changing
2020-01-23 08:22:44 +01:00
bcast.h
…
bearer.c
tipc: check attribute length for bearer name
2022-06-14 18:11:56 +02:00
bearer.h
tipc: add loopback device tracking
2019-08-08 22:11:39 -07:00
core.c
tipc: wait and exit until all work queues are done
2021-06-03 08:59:07 +02:00
core.h
tipc: wait and exit until all work queues are done
2021-06-03 08:59:07 +02:00
diag.c
…
discover.c
…
discover.h
…
eth_media.c
…
group.c
tipc: Fix memory leak in tipc_group_create_member()
2020-09-26 18:03:13 +02:00
group.h
…
ib_media.c
…
Kconfig
docs: kbuild: convert docs to ReST and rename to *.rst
2019-06-14 14:21:21 -06:00
link.c
tipc: improve size validations for received domain records
2022-02-11 09:07:52 +01:00
link.h
tipc: fix missing Name entries due to half-failover
2019-05-04 00:59:51 -04:00
Makefile
…
monitor.c
tipc: improve size validations for received domain records
2022-02-11 09:07:52 +01:00
monitor.h
tipc: update mon's self addr when node addr generated
2020-01-26 10:01:00 +01:00
msg.c
tipc: skb_linearize the head skb when reassembling msgs
2021-06-03 08:59:07 +02:00
msg.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2019-08-19 11:54:03 -07:00
name_distr.c
tipc: rate limit warning for received illegal binding update
2022-02-16 12:52:51 +01:00
name_distr.h
…
name_table.c
tipc: Fix end of loop tests for list_for_each_entry()
2022-03-02 11:41:06 +01:00
name_table.h
…
net.c
tipc: fix a deadlock when flushing scheduled work
2020-12-11 13:23:32 +01:00
net.h
tipc: fix a deadlock when flushing scheduled work
2020-12-11 13:23:32 +01:00
netlink_compat.c
tipc: convert dest node's address to network order
2021-05-19 10:08:20 +02:00
netlink.c
tipc: add missing attribute validation for MTU property
2020-03-18 07:17:45 +01:00
netlink.h
…
node.c
tipc: clean up skb list lock handling on send path
2019-08-18 14:01:07 -07:00
node.h
tipc: optimize link synching mechanism
2019-07-25 15:55:47 -07:00
socket.c
tipc: fix the timer expires after interval 100ms
2022-04-15 14:18:17 +02:00
socket.h
…
subscr.c
…
subscr.h
tipc: fix modprobe tipc failed after switch order of device registration
2019-05-20 10:45:43 -07:00
sysctl.c
proc/sysctl: add shared variables for range check
2019-07-18 17:08:07 -07:00
topsrv.c
tipc: fix memory leak in tipc_topsrv_start()
2020-11-18 19:20:33 +01:00
topsrv.h
…
trace.c
…
trace.h
…
udp_media.c
tipc: wait and exit until all work queues are done
2021-06-03 08:59:07 +02:00
udp_media.h
…