Ilia Gavrilov 80702f002b llc: fix data loss when reading from a socket in llc_ui_recvmsg() ...

commit 239af1970b upstream.

For SOCK_STREAM sockets, if user buffer size (len) is less
than skb size (skb->len), the remaining data from skb
will be lost after calling kfree_skb().

To fix this, move the statement for partial reading
above skb deletion.

Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org)

Fixes: 30a584d944 ("[LLX]: SOCK_DGRAM interface fixes")
Cc: stable@vger.kernel.org
Signed-off-by: Ilia Gavrilov <Ilia.Gavrilov@infotecs.ru>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-05-29 11:03:20 +02:00

..

af_llc.c

llc: fix data loss when reading from a socket in llc_ui_recvmsg()

2025-05-29 11:03:20 +02:00

Kconfig

…

llc_c_ac.c

…

llc_c_ev.c

…

llc_c_st.c

llc: Constify struct llc_conn_state_trans

2024-07-15 08:51:01 -07:00

llc_conn.c

llc: Constify struct llc_conn_state_trans

2024-07-15 08:51:01 -07:00

llc_core.c

…

llc_if.c

…

llc_input.c

net: llc: reset skb->transport_header

2025-01-09 13:33:40 +01:00

llc_output.c

…

llc_pdu.c

…

llc_proc.c

…

llc_s_ac.c

llc: do not use skb_get() before dev_queue_xmit()

2025-03-13 13:02:05 +01:00

llc_s_ev.c

…

llc_s_st.c

llc: Constify struct llc_sap_state_trans

2024-07-15 08:51:19 -07:00

llc_sap.c

llc: Constify struct llc_sap_state_trans

2024-07-15 08:51:19 -07:00

llc_station.c

…

Makefile

…

sysctl_net_llc.c

…