Eric Dumazet
138b787804
mISDN: fix MISDN_TIME_STAMP handling
syzbot reports one unsafe call to copy_from_sockptr() [1]
Use copy_safe_from_sockptr() instead.
[1]
BUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset include/linux/sockptr.h:49 [inline]
BUG: KASAN: slab-out-of-bounds in copy_from_sockptr include/linux/sockptr.h:55 [inline]
BUG: KASAN: slab-out-of-bounds in data_sock_setsockopt+0x46c/0x4cc drivers/isdn/mISDN/socket.c:417
Read of size 4 at addr ffff0000c6d54083 by task syz-executor406/6167
CPU: 1 PID: 6167 Comm: syz-executor406 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Call trace:
dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:291
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:298
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xd0/0x124 lib/dump_stack.c:106
print_address_description mm/kasan/report.c:377 [inline]
print_report+0x178/0x518 mm/kasan/report.c:488
kasan_report+0xd8/0x138 mm/kasan/report.c:601
__asan_report_load_n_noabort+0x1c/0x28 mm/kasan/report_generic.c:391
copy_from_sockptr_offset include/linux/sockptr.h:49 [inline]
copy_from_sockptr include/linux/sockptr.h:55 [inline]
data_sock_setsockopt+0x46c/0x4cc drivers/isdn/mISDN/socket.c:417
do_sock_setsockopt+0x2a0/0x4e0 net/socket.c:2311
__sys_setsockopt+0x128/0x1a8 net/socket.c:2334
__do_sys_setsockopt net/socket.c:2343 [inline]
__se_sys_setsockopt net/socket.c:2340 [inline]
__arm64_sys_setsockopt+0xb8/0xd4 net/socket.c:2340
__invoke_syscall arch/arm64/kernel/syscall.c:34 [inline]
invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48
el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:133
do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:152
el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712
el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730
el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598
Fixes: 1b2b03f8e5 ("Add mISDN core files")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: syzbot <syzkaller@googlegroups.com>
Cc: Karsten Keil <isdn@linux-pingi.de>
Link: https://lore.kernel.org/r/20240408082845.3957374-3-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2024-04-09 17:01:01 -07:00
..
2024-03-13 18:34:05 -07:00
2024-03-21 13:21:31 -07:00
2024-03-29 19:00:09 +01:00
2024-03-21 13:21:31 -07:00
2024-03-25 15:46:12 -04:00
2024-03-07 20:36:32 -08:00
2024-03-12 17:37:54 +02:00
2024-03-21 13:34:15 -07:00
2024-03-22 12:46:07 -07:00
2024-03-29 09:48:37 -04:00
2024-03-21 13:21:31 -07:00
2024-03-07 11:53:30 -07:00
2024-03-07 21:52:03 +00:00
2024-03-21 13:21:31 -07:00
2024-03-19 11:57:26 -07:00
2024-03-23 14:42:45 -07:00
2024-03-21 13:21:31 -07:00
2024-03-22 10:41:13 -07:00
2024-03-22 10:41:13 -07:00
2024-03-25 10:48:23 -07:00
2024-03-27 01:58:34 +09:00
2024-03-15 11:58:32 -07:00
2024-03-07 20:37:04 +00:00
2024-03-15 12:25:13 -07:00
2024-03-25 21:11:58 +01:00
2024-03-25 19:40:23 -07:00
2024-03-11 18:14:06 -07:00
2024-03-21 21:20:18 +09:00
2024-03-28 16:19:46 +01:00
2024-03-21 13:21:31 -07:00
2024-03-26 12:50:50 +01:00
2024-03-31 11:23:51 -07:00
2024-03-21 13:21:31 -07:00
2024-03-14 09:56:15 -07:00
2024-03-21 10:01:02 -07:00
2024-03-14 18:03:09 -07:00
2024-03-05 20:01:14 -08:00
2024-03-26 00:47:08 +01:00
2024-03-05 21:25:18 +01:00
2024-03-21 13:21:31 -07:00
2024-03-18 15:34:03 -07:00
2024-03-21 12:44:10 -07:00
2024-03-06 14:03:31 +00:00
2024-03-28 06:38:40 +01:00
2024-03-07 20:32:47 +00:00
2024-03-26 02:12:16 +01:00
2024-04-09 17:01:01 -07:00
2024-03-14 18:03:09 -07:00
2024-03-15 17:53:48 -07:00
2024-03-13 12:23:36 -07:00
2024-03-07 20:38:15 +00:00
2024-03-29 09:48:07 -04:00
2024-03-18 17:30:46 +00:00
2024-03-21 13:21:31 -07:00
2024-03-13 10:59:28 -07:00
2024-03-21 12:44:10 -07:00
2024-03-23 08:43:21 -07:00
2024-03-25 13:12:46 +01:00
2024-03-07 20:32:38 +00:00
2024-03-21 15:09:29 -07:00
2024-04-09 11:59:42 +02:00
2024-03-15 11:58:32 -07:00
2024-03-21 13:23:07 -06:00
2024-03-07 20:21:53 +00:00
2024-03-21 13:34:15 -07:00
2024-03-11 10:39:24 +05:30
2024-03-08 10:00:07 +01:00
2024-03-07 21:50:06 +00:00
2024-03-14 10:58:27 -07:00
2024-03-10 09:07:00 +01:00
2024-03-22 10:41:13 -07:00
2024-03-21 12:35:20 -07:00
2024-03-31 11:23:51 -07:00
2024-03-21 13:21:31 -07:00
2024-03-13 11:33:10 -07:00
2024-03-14 10:19:48 -07:00
2024-03-13 20:45:54 +01:00
2024-03-07 21:51:39 +00:00
2024-03-12 17:44:08 -07:00
2024-03-29 13:50:10 +01:00
2024-03-26 21:48:21 +01:00
2024-03-22 09:52:37 -07:00
2024-03-21 10:37:39 -07:00
2024-03-21 17:16:46 -07:00
2024-04-08 11:55:45 +01:00
2024-03-15 12:47:21 -07:00
2024-03-25 20:47:05 -04:00
2024-03-21 15:18:18 -07:00
2024-03-07 20:21:39 +00:00
2024-03-21 14:50:39 -07:00
2024-03-15 12:22:52 -07:00
2024-03-22 09:57:00 -07:00
2024-03-25 19:10:01 +01:00
2024-03-25 14:03:35 -04:00
2024-03-12 10:35:24 -07:00
2024-03-27 16:27:39 +01:00
2024-03-21 12:35:20 -07:00
2024-03-21 12:44:10 -07:00
2024-03-25 14:03:35 -04:00
2024-03-27 09:48:47 -07:00
2024-03-26 15:02:28 +01:00
2024-03-19 02:45:51 -04:00
2024-03-15 13:21:13 -07:00
2024-03-19 08:57:39 -07:00
2024-03-25 21:34:08 +01:00
2024-03-09 11:37:18 +01:00
2024-03-19 03:19:22 -04:00
2024-03-17 12:06:10 -07:00
2024-03-19 08:48:09 -07:00
2024-03-07 08:48:10 +00:00