Dan Carpenter 7e1ad75dcc chelsio/chtls: prevent potential integer overflow on 32bit ...

commit fbbd84af6b upstream.

The "gl->tot_len" variable is controlled by the user.  It comes from
process_responses().  On 32bit systems, the "gl->tot_len +
sizeof(struct cpl_pass_accept_req) + sizeof(struct rss_header)" addition
could have an integer wrapping bug.  Use size_add() to prevent this.

Fixes: a089439478 ("crypto: chtls - Register chtls with net tls")
Cc: stable@vger.kernel.org
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: Simon Horman <horms@kernel.org>
Link: https://patch.msgid.link/c6bfb23c-2db2-4e1b-b8ab-ba3925c82ef5@stanley.mountain
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-12-27 14:02:07 +01:00

..

3com

…

8390

…

actions

…

adaptec

…

adi

…

aeroflex

net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()

2024-10-15 09:59:20 -07:00

agere

…

alacritech

…

allwinner

…

alteon

…

altera

…

amazon

…

amd

…

apm

…

apple

…

aquantia

…

arc

net: arc: rockchip: fix emac mdio node support

2024-11-07 13:39:42 +01:00

asix

…

atheros

…

broadcom

net: ethernet: bgmac-platform: fix an OF node reference leak

2024-12-27 14:02:04 +01:00

brocade

…

cadence

net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY

2024-10-15 10:40:47 -07:00

calxeda

…

cavium

…

chelsio

chelsio/chtls: prevent potential integer overflow on 32bit

2024-12-27 14:02:07 +01:00

cirrus

…

cisco

…

cortina

…

davicom

…

dec

…

dlink

…

emulex

be2net: fix potential memory leak in be_xmit()

2024-10-19 16:06:08 -05:00

engleder

…

ezchip

…

faraday

…

freescale

fsl/fman: Validate cell-index value obtained from Device Tree

2024-12-14 20:03:53 +01:00

fujitsu

…

fungible

…

google

gve: Flow steering trigger reset only for timeout error

2024-12-05 14:02:56 +01:00

hisilicon

net: hns3: fix kernel crash when uninstalling driver

2024-11-05 13:45:39 +01:00

huawei

net: hinic: Fix cleanup in create_rxqs/txqs()

2024-12-27 14:02:04 +01:00

i825xx

net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()

2024-10-19 16:04:20 -05:00

ibm

…

intel

igb: Fix potential invalid memory access in igb_init_module()

2024-12-14 20:03:07 +01:00

litex

…

marvell

octeontx2-af: Quiesce traffic before NIX block reset

2024-12-05 14:02:33 +01:00

mediatek

net: ethernet: mtk_wed: fix path of MT7988 WO firmware

2024-10-30 18:26:24 -07:00

mellanox

net/mlx5: DR, prevent potential error pointer dereference

2024-12-19 18:13:12 +01:00

meta

eth: fbnic: don't disable the PCI device twice

2024-12-05 14:02:00 +01:00

micrel

…

microchip

net: sparx5: fix the maximum frame length register

2024-12-19 18:13:14 +01:00

microsoft

net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs

2024-12-19 18:13:18 +01:00

moxa

…

mscc

net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()

2024-12-27 14:02:02 +01:00

myricom

…

natsemi

…

neterion

…

netronome

…

ni

…

nvidia

…

nxp

…

oki-semi

…

packetengines

…

pasemi

…

pensando

ionic: use ee->offset when returning sprom data

2024-12-27 14:02:03 +01:00

qlogic

net/qed: allow old cards not supporting "num_images" to work

2024-12-14 20:03:05 +01:00

qualcomm

qca_spi: Make driver probing reliable

2024-12-19 18:13:15 +01:00

rdc

…

realtek

r8169: don't apply UDP padding quirk on RTL8126A

2024-12-14 20:03:45 +01:00

renesas

net: renesas: rswitch: rework ts tags management

2024-12-27 14:02:03 +01:00

rocker

rocker: fix link status detection in rocker_carrier_init()

2024-12-14 20:03:57 +01:00

samsung

…

seeq

…

sfc

…

sgi

…

silan

…

sis

…

smsc

…

socionext

…

stmicro

net: stmmac: fix TSO DMA API usage causing oops

2024-12-27 14:01:57 +01:00

sun

…

sunplus

…

synopsys

…

tehuti

…

ti

net: ti: icssg-prueth: Fix 1 PPS sync

2024-11-14 10:34:56 +01:00

toshiba

…

tundra

…

vertexcom

net: vertexcom: mse102x: Fix tx_bytes calculation

2024-11-09 13:41:17 -08:00

via

…

wangxun

net: txgbe: fix null pointer to pcs

2024-12-05 14:02:01 +01:00

wiznet

…

xilinx

net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts

2024-11-03 14:35:11 -08:00

xircom

…

xscale

…

dnet.c

…

dnet.h

…

ec_bhf.c

…

ethoc.c

…

fealnx.c

…

jme.c

…

jme.h

…

Kconfig

…

korina.c

…

lantiq_etop.c

…

lantiq_xrx200.c

…

Makefile

…

oa_tc6.c

net: ethernet: oa_tc6: fix tx skb race condition between reference pointers

2024-12-27 14:02:04 +01:00