Mateusz Jurczyk 20a3d5bf5e caif: Add sockaddr length check before accessing sa_family in connect handler ...

Verify that the caller-provided sockaddr structure is large enough to
contain the sa_family field, before accessing it in the connect()
handler of the AF_CAIF socket. Since the syscall doesn't enforce a minimum
size of the corresponding memory region, very short sockaddrs (zero or one
byte long) result in operating on uninitialized memory while referencing
sa_family.

Signed-off-by: Mateusz Jurczyk <mjurczyk@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2017-06-13 16:16:11 -04:00

..

caif_dev.c

…

caif_socket.c

caif: Add sockaddr length check before accessing sa_family in connect handler

2017-06-13 16:16:11 -04:00

caif_usb.c

…

cfcnfg.c

…

cfctrl.c

…

cfdbgl.c

…

cfdgml.c

…

cffrml.c

…

cfmuxl.c

…

cfpkt_skbuff.c

net: caif: Fix a sleep-in-atomic bug in cfpkt_create_pfx

2017-06-10 18:19:45 -04:00

cfrfml.c

…

cfserl.c

…

cfsrvl.c

…

cfutill.c

…

cfveil.c

…

cfvidl.c

…

chnl_net.c

net: Fix inconsistent teardown and release of private netdev state.

2017-06-07 15:53:24 -04:00

Kconfig

…

Makefile

…