Michal LuczajandGreg Kroah-Hartman 265f1f22fd rxrpc: Improve setsockopt() handling of malformed user input ...

[ Upstream commit 0202005664 ]

copy_from_sockptr() does not return negative value on error; instead, it
reports the number of bytes that failed to copy. Since it's deprecated,
switch to copy_safe_from_sockptr().

Note: Keeping the `optlen != sizeof(unsigned int)` check as
copy_safe_from_sockptr() by itself would also accept
optlen > sizeof(unsigned int). Which would allow a more lenient handling
of inputs.

Fixes: 17926a7932 ("[AF_RXRPC]: Provide secure RxRPC sockets for use by userspace and kernel both")
Signed-off-by: Michal Luczaj <mhal@rbox.co>
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-12-09 10:32:35 +01:00

..

af_rxrpc.c

rxrpc: Improve setsockopt() handling of malformed user input

2024-12-09 10:32:35 +01:00

ar-internal.h

rxrpc: Fix a race between socket set up and I/O thread creation

2024-10-10 11:58:08 +02:00

call_accept.c

…

call_event.c

rxrpc: Fix counting of new acks and nacks

2024-02-16 19:10:50 +01:00

call_object.c

rxrpc: Fix congestion control algorithm

2024-05-17 12:02:23 +02:00

call_state.c

…

conn_client.c

rxrpc: Fix missing locking causing hanging calls

2024-11-14 13:19:32 +01:00

conn_event.c

rxrpc: Fix the names of the fields in the ACK trailer struct

2024-05-17 12:02:23 +02:00

conn_object.c

rxrpc: Clients must accept conn from any address

2024-05-17 12:02:06 +02:00

conn_service.c

…

input.c

rxrpc: Only transmit one ACK per jumbo packet received

2024-05-17 12:02:23 +02:00

insecure.c

…

io_thread.c

rxrpc: Fix a race between socket set up and I/O thread creation

2024-10-10 11:58:08 +02:00

Kconfig

…

key.c

…

local_event.c

…

local_object.c

rxrpc: Fix a race between socket set up and I/O thread creation

2024-10-10 11:58:08 +02:00

Makefile

…

misc.c

…

net_ns.c

…

output.c

rxrpc: Fix the names of the fields in the ACK trailer struct

2024-05-17 12:02:23 +02:00

peer_event.c

…

peer_object.c

…

proc.c

…

protocol.h

rxrpc: Fix the names of the fields in the ACK trailer struct

2024-05-17 12:02:23 +02:00

recvmsg.c

…

rtt.c

…

rxkad.c

rxrpc: Don't pick values out of the wire header when setting up security

2024-08-29 17:33:36 +02:00

rxperf.c

…

security.c

…

sendmsg.c

rxrpc: Fix uninitialised variable in rxrpc_send_data()

2024-10-17 15:24:24 +02:00

server_key.c

…

skbuff.c

…

sysctl.c

…

txbuf.c

…

utils.c

…