Gustavo A. R. Silva 56e7424c6e tipc: Use size_add() in calls to struct_size() ...

[ Upstream commit 2506a91734 ]

If, for any reason, the open-coded arithmetic causes a wraparound,
the protection that `struct_size()` adds against potential integer
overflows is defeated. Fix this by hardening call to `struct_size()`
with `size_add()`.

Fixes: e034c6d23b ("tipc: Use struct_size() helper")
Signed-off-by: Gustavo A. R. Silva <gustavoars@kernel.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-11-20 11:08:14 +01:00

..

addr.c

…

addr.h

…

bcast.c

…

bcast.h

…

bearer.c

net: tipc: resize nlattr array to correct size

2023-06-21 15:59:18 +02:00

bearer.h

tipc: add tipc_bearer_min_mtu to calculate min mtu

2023-05-24 17:36:51 +01:00

core.c

…

core.h

…

crypto.c

tipc: fix a potential deadlock on &tx->lock

2023-10-10 21:59:08 +02:00

crypto.h

…

diag.c

…

discover.c

…

discover.h

…

eth_media.c

…

group.c

…

group.h

…

ib_media.c

…

Kconfig

…

link.c

tipc: Use size_add() in calls to struct_size()

2023-11-20 11:08:14 +01:00

link.h

…

Makefile

…

monitor.c

…

monitor.h

…

msg.c

…

msg.h

…

name_distr.c

…

name_distr.h

…

name_table.c

…

name_table.h

…

net.c

…

net.h

…

netlink_compat.c

…

netlink.c

…

netlink.h

…

node.c

tipc: stop tipc crypto on failure in tipc_node_create

2023-08-03 10:22:37 +02:00

node.h

…

socket.c

net: deal with most data-races in sk_wait_event()

2023-05-24 17:36:42 +01:00

socket.h

…

subscr.c

…

subscr.h

…

sysctl.c

…

topsrv.c

…

topsrv.h

…

trace.c

…

trace.h

…

udp_media.c

tipc: add tipc_bearer_min_mtu to calculate min mtu

2023-05-24 17:36:51 +01:00

udp_media.h

…