Files
linux/include/linux
Willem de Bruijn 6dd912f826 net: check untrusted gso_size at kernel entry
Syzkaller again found a path to a kernel crash through bad gso input:
a packet with gso size exceeding len.

These packets are dropped in tcp_gso_segment and udp[46]_ufo_fragment.
But they may affect gso size calculations earlier in the path.

Now that we have thlen as of commit 9274124f02 ("net: stricter
validation of untrusted gso packets"), check gso_size at entry too.

Fixes: bfd5f4a3d6 ("packet: Add GSO/csum offload support.")
Reported-by: syzbot <syzkaller@googlegroups.com>
Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2020-05-26 20:23:46 -07:00
..
2020-03-31 21:29:04 +02:00
2020-03-30 01:34:00 +02:00
2020-04-10 15:36:21 -07:00
2020-03-09 11:12:19 +01:00
2020-02-17 13:37:00 +01:00
2020-03-13 12:49:51 -07:00
2020-05-04 09:16:37 -07:00
2020-03-06 11:06:15 +01:00
2020-03-27 20:19:24 -03:00
2020-03-21 16:00:24 +01:00
2020-02-20 21:17:24 +01:00
2020-04-10 15:36:21 -07:00
2020-05-05 16:58:36 +02:00
2020-03-06 11:56:59 +01:00
2020-04-07 10:43:38 -07:00
2020-03-21 16:00:24 +01:00
2020-04-02 09:35:27 -07:00
2020-04-07 10:43:38 -07:00
2020-04-09 12:15:35 -05:00
2020-03-21 16:00:24 +01:00
2020-02-21 10:31:18 +01:00
2020-04-07 10:43:42 -07:00
2020-03-21 16:00:24 +01:00
2020-03-02 14:04:31 -07:00
2020-02-04 03:05:26 +00:00
2020-03-23 13:41:55 +01:00
2020-05-04 09:16:37 -07:00
2020-02-21 11:22:15 -08:00
2020-03-23 17:01:47 +01:00
2020-04-17 06:05:30 -04:00
2020-04-01 12:06:26 -04:00
2020-04-17 06:05:30 -04:00