linux

Go to file

Cong Wang 6c2e795f95 tipc: fix uninit skb->data in tipc_nl_compat_dumpit() [ Upstream commit `47733f9daf` ] __tipc_nl_compat_dumpit() has two callers, and it expects them to pass a valid nlmsghdr via arg->data. This header is artificial and crafted just for __tipc_nl_compat_dumpit(). tipc_nl_compat_publ_dump() does so by putting a genlmsghdr as well as some nested attribute, TIPC_NLA_SOCK. But the other caller tipc_nl_compat_dumpit() does not, this leaves arg->data uninitialized on this call path. Fix this by just adding a similar nlmsghdr without any payload in tipc_nl_compat_dumpit(). This bug exists since day 1, but the recent commit `6ea67769ff` ("net: tipc: prepare attrs in __tipc_nl_compat_dumpit()") makes it easier to appear. Reported-and-tested-by: syzbot+0e7181deafa7e0b79923@syzkaller.appspotmail.com Fixes: `d0796d1ef6` ("tipc: convert legacy nl bearer dump to nl compat") Cc: Jon Maloy <jmaloy@redhat.com> Cc: Ying Xue <ying.xue@windriver.com> Cc: Richard Alpe <richard.alpe@ericsson.com> Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com> Acked-by: Ying Xue <ying.xue@windriver.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-09-03 11:26:40 +02:00
Documentation	kbuild: support LLVM=1 to switch the default tools to Clang/LLVM	2020-08-26 10:40:47 +02:00
LICENSES	…
arch	powerpc/64s: Don't init FSCR_DSCR in __init_FSCR()	2020-09-03 11:26:39 +02:00
block	iocost: Fix check condition of iocg abs_vdebt	2020-08-19 08:15:58 +02:00
certs	…
crypto	crypto: algif_aead - fix uninitialized ctx->init	2020-08-21 13:05:38 +02:00
drivers	xen: don't reschedule in preemption off sections	2020-08-26 10:41:07 +02:00
fs	binfmt_flat: revert "binfmt_flat: don't offset the data start"	2020-09-03 11:26:39 +02:00
include	iommu/vt-d: Enforce PASID devTLB field mask	2020-08-21 13:05:34 +02:00
init	x86: Fix early boot crash on gcc-10, third try	2020-05-20 08:20:34 +02:00
ipc	ipc/util.c: sysvipc_find_ipc() incorrectly updates position index	2020-05-20 08:20:16 +02:00
kernel	kthread: Do not preempt current task if it is going to call schedule()	2020-08-26 10:40:53 +02:00
lib	test_kmod: avoid potential double free in trigger_config_run_type()	2020-08-21 13:05:37 +02:00
mm	mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible	2020-08-26 10:41:07 +02:00
net	tipc: fix uninit skb->data in tipc_nl_compat_dumpit()	2020-09-03 11:26:40 +02:00
samples	bpf: Fix fds_example SIGSEGV error	2020-08-19 08:16:03 +02:00
scripts	kconfig: qconf: fix signal connection to invalid slots	2020-08-26 10:41:04 +02:00
security	Smack: prevent underflow in smk_set_cipso()	2020-08-19 08:16:16 +02:00
sound	ASoC: intel: Fix memleak in sst_media_open	2020-08-26 10:41:03 +02:00
tools	tools/testing/selftests/cgroup/cgroup_util.c: cg_read_strcmp: fix null pointer dereference	2020-08-26 10:40:57 +02:00
usr	…
virt	KVM: arm64: Only reschedule if MMU_NOTIFIER_RANGE_BLOCKABLE is not set	2020-08-26 10:41:08 +02:00
.clang-format	…
.cocciconfig	…
.get_maintainer.ignore	…
.gitattributes	…
.gitignore	…
.mailmap	…
COPYING	…
CREDITS	…
Kbuild	…
Kconfig	…
MAINTAINERS	Documentation/llvm: add documentation on building w/ Clang/LLVM	2020-08-26 10:40:46 +02:00
Makefile	Linux 5.4.61	2020-08-26 10:41:08 +02:00
README	…

README

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.