Xin Long
7b7e51ff35
tipc: check link name with right length in tipc_nl_compat_link_set ...
commit 8c63bf9ab4be8b83bd8c34aacfd2f1d2c8901c8a upstream.
A similar issue as fixed by Patch "tipc: check bearer name with right
length in tipc_nl_compat_bearer_enable" was also found by syzbot in
tipc_nl_compat_link_set().
The length to check with should be 'TLV_GET_DATA_LEN(msg->req) -
offsetof(struct tipc_link_config, name)'.
Reported-by: syzbot+de00a87b8644a582ae79@syzkaller.appspotmail.com
Signed-off-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-05-02 09:32:04 +02:00
tipc: simplify include dependencies
2015-05-14 12:24:45 -04:00
tipc: introduce constants for tipc address validation
2016-07-26 14:26:42 -07:00
tipc: fix broadcast link synchronization problem
2016-10-29 17:21:09 -04:00
tipc: fix broadcast link synchronization problem
2016-10-29 17:21:09 -04:00
tipc: error path leak fixes in tipc_enable_bearer()
2018-03-03 10:23:24 +01:00
tipc: check minimum bearer MTU
2016-12-02 14:03:20 -05:00
tipc: add neighbor monitoring framework
2016-06-15 14:06:28 -07:00
tipc: add neighbor monitoring framework
2016-06-15 14:06:28 -07:00
tipc: allocate user memory with GFP_KERNEL flag
2017-07-05 14:40:27 +02:00
tipc: eliminate buffer leak in bearer layer
2016-04-07 17:00:13 -04:00
tipc: make media address offset a common define
2015-02-27 18:18:48 -05:00
tipc: rename media/msg related definitions
2015-02-27 18:18:48 -05:00
tipc: add ip/udp media type
2015-03-05 22:08:42 -05:00
tipc: allocate user memory with GFP_KERNEL flag
2017-07-05 14:40:27 +02:00
tipc: transfer broadcast nacks in link state messages
2016-09-02 17:10:24 -07:00
tipc: add neighbor monitoring framework
2016-06-15 14:06:28 -07:00
tipc: fix tipc_mon_delete() oops in tipc_enable_bearer() error path
2018-03-03 10:23:24 +01:00
tipc: dump monitor attributes
2016-07-26 14:26:42 -07:00
tipc: use only positive error codes in messages
2017-10-12 11:51:23 +02:00
tipc: allocate user memory with GFP_KERNEL flag
2017-07-05 14:40:27 +02:00
tipc: allocate user memory with GFP_KERNEL flag
2017-07-05 14:40:27 +02:00
tipc: reduce code dependency between binding table and node layer
2015-11-20 14:06:10 -05:00
tipc: move netlink policies to netlink.c
2016-03-07 14:56:41 -05:00
tipc: convert legacy nl name table dump to nl compat
2015-02-09 13:20:48 -08:00
tipc: Fix tipc_sk_reinit race conditions
2017-06-17 06:41:49 +02:00
tipc: add peer removal functionality
2016-08-18 23:36:07 -07:00
tipc: add policy for TIPC_NLA_NET_ADDR
2018-04-29 11:32:01 +02:00
tipc: make cluster size threshold for monitoring configurable
2016-07-26 14:26:42 -07:00
tipc: check link name with right length in tipc_nl_compat_link_set
2019-05-02 09:32:04 +02:00
tipc: check return value of nlmsg_new
2018-03-24 11:00:14 +01:00
tipc: transfer broadcast nacks in link state messages
2016-09-02 17:10:24 -07:00
tipc: fix memory leak in tipc_accept_from_sock()
2017-12-16 16:25:45 +01:00
tipc: fix a race condition leading to subscriber refcnt bug
2016-04-14 16:46:46 -04:00
tipc: use lock_sock() in tipc_sk_reinit()
2019-01-09 16:16:41 +01:00
tipc: redesign connection-level flow control
2016-05-03 15:51:16 -04:00
tipc: use destination length for copy string
2018-12-08 13:05:09 +01:00
tipc: add subscription refcount to avoid invalid delete
2017-06-17 06:41:57 +02:00
tipc: compare remote and local protocols in tipc_udp_enable()
2019-01-09 16:16:41 +01:00
tipc: add UDP remoteip dump to netlink API
2016-08-26 21:38:41 -07:00
7b7e51ff35