Google Git
Sign in
android / kernel / common.git / 2450d621f6d2024355df8c83505350f5cc2dc4e4
commit2450d621f6d2024355df8c83505350f5cc2dc4e4[log] [tgz]
authorMohamed Ghannam <simo.ghannam@gmail.com>Sun Dec 10 03:50:58 2017 +0000
committerTodd Kjos <tkjos@google.com>Tue Apr 03 10:22:00 2018 -0700
tree26f5d6e75e84c535c6a787ab95337180e01749bb
parentc03b17e80506e62f20ff3bc8c443a21061ff3700 [diff]
net: ipv4: fix for a race condition in raw_sendmsg

[ Upstream commit 8f659a03a0ba9289b9aeb9b4470e6fb263d6f483 ]

inet->hdrincl is racy, and could lead to uninitialized stack pointer
usage, so its value should be read only once.

Change-Id: I737dd2332424a97fc9d3c090e838ff28b0029c26
Fixes: c008ba5bdc9f ("ipv4: Avoid reading user iov twice after raw_probe_proto_opt")
Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
1 file changed
tree: 26f5d6e75e84c535c6a787ab95337180e01749bb
  1. android/
  2. arch/
  3. block/
  4. certs/
  5. crypto/
  6. Documentation/
  7. drivers/
  8. firmware/
  9. fs/
  10. include/
  11. init/
  12. ipc/
  13. kernel/
  14. lib/
  15. mm/
  16. net/
  17. samples/
  18. scripts/
  19. security/
  20. sound/
  21. tools/
  22. usr/
  23. virt/
  24. .get_maintainer.ignore
  25. .gitignore
  26. .mailmap
  27. build.config.goldfish.arm
  28. build.config.goldfish.arm64
  29. build.config.goldfish.mips
  30. build.config.goldfish.mips64
  31. build.config.goldfish.x86
  32. build.config.goldfish.x86_64
  33. COPYING
  34. CREDITS
  35. Kbuild
  36. Kconfig
  37. MAINTAINERS
  38. Makefile
  39. README
  40. REPORTING-BUGS