Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Nikita Zhandarovich 352daa5094 net/rose: prevent integer overflows in rose_setsockopt() ... [ Upstream commit d640627663 ] In case of possible unpredictably large arguments passed to rose_setsockopt() and multiplied by extra values on top of that, integer overflows may occur. Do the safest minimum and fix these issues by checking the contents of 'opt' and returning -EINVAL if they are too large. Also, switch to unsigned int and remove useless check for negative 'opt' in ROSE_IDLE case. Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") Signed-off-by: Nikita Zhandarovich <n.zhandarovich@fintech.ru> Link: https://patch.msgid.link/20250115164220.19954-1-n.zhandarovich@fintech.ru Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		History 2025-02-08 09:52:04 +01:00
..
af_rose.c	net/rose: prevent integer overflows in rose_setsockopt()	2025-02-08 09:52:04 +01:00
Makefile	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
rose_dev.c	rose: constify dev_addr passing	2021-10-13 09:40:45 -07:00
rose_in.c	net: Don't include filter.h from net/sock.h	2021-12-29 08:48:14 -08:00
rose_link.c	rose: Fix NULL pointer dereference in rose_send_frame()	2022-11-02 11:57:30 +00:00
rose_loopback.c	rose: check NULL rose_loopback_neigh->loopback	2022-08-22 14:24:54 +01:00
rose_out.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
rose_route.c	net: rose: fix netdev reference changes	2022-08-01 11:59:23 -07:00
rose_subr.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
rose_timer.c	net: rose: fix UAF bugs caused by timer handler	2022-06-30 11:07:30 +02:00
sysctl_net_rose.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00