Jordan Rife 5b5e58299e net: prevent address rewrite in kernel_bind() ...

commit c889a99a21 upstream.

Similar to the change in commit 0bdf399342c5("net: Avoid address
overwrite in kernel_connect"), BPF hooks run on bind may rewrite the
address passed to kernel_bind(). This change

1) Makes a copy of the bind address in kernel_bind() to insulate
   callers.
2) Replaces direct calls to sock->ops->bind() in net with kernel_bind()

Link: https://lore.kernel.org/netdev/20230912013332.2048422-1-jrife@google.com/
Fixes: 4fbac77d2d ("bpf: Hooks for sys_bind")
Cc: stable@vger.kernel.org
Reviewed-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: Jordan Rife <jrife@google.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-10-19 23:05:33 +02:00

..

af_rds.c

…

bind.c

…

cong.c

…

connection.c

…

ib_cm.c

…

ib_frmr.c

…

ib_mr.h

…

ib_rdma.c

…

ib_recv.c

…

ib_ring.c

…

ib_send.c

…

ib_stats.c

…

ib_sysctl.c

…

ib.c

…

ib.h

…

info.c

…

info.h

…

Kconfig

…

loop.c

…

loop.h

…

Makefile

…

message.c

rds: rds_rm_zerocopy_callback() correct order for list_add_tail()

2023-03-10 09:39:16 +01:00

page.c

…

rdma_transport.c

net: rds: Fix possible NULL-pointer dereference

2023-10-06 13:18:08 +02:00

rdma_transport.h

…

rdma.c

…

rds_single_path.h

…

rds.h

…

recv.c

…

send.c

…

stats.c

…

sysctl.c

…

tcp_connect.c

net: prevent address rewrite in kernel_bind()

2023-10-19 23:05:33 +02:00

tcp_listen.c

net: prevent address rewrite in kernel_bind()

2023-10-19 23:05:33 +02:00

tcp_recv.c

…

tcp_send.c

…

tcp_stats.c

…

tcp.c

…

tcp.h

…

threads.c

…

transport.c

…