linux/net/tipc
Shigeru Yoshida aa38bf7489 tipc: Return non-zero value from tipc_udp_addr2str() on error
[ Upstream commit fa96c6baef ]

tipc_udp_addr2str() should return non-zero value if the UDP media
address is invalid. Otherwise, a buffer overflow access can occur in
tipc_media_addr_printf(). Fix this by returning 1 on an invalid UDP
media address.

Fixes: d0f91938be ("tipc: add ip/udp media type")
Signed-off-by: Shigeru Yoshida <syoshida@redhat.com>
Reviewed-by: Tung Nguyen <tung.q.nguyen@endava.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-08-19 05:41:04 +02:00
..
addr.c
addr.h
bcast.c net: tipc: fix FB_MTU eat two pages 2021-07-14 16:56:32 +02:00
bcast.h
bearer.c tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() 2024-02-23 08:42:20 +01:00
bearer.h tipc: add tipc_bearer_min_mtu to calculate min mtu 2023-05-30 12:57:52 +01:00
core.c tipc: fix use-after-free Read in tipc_named_reinit 2022-06-29 08:59:47 +02:00
core.h tipc: simplify the finalize work queue 2022-06-29 08:59:47 +02:00
crypto.c tipc: fix a potential deadlock on &tx->lock 2023-10-10 21:53:38 +02:00
crypto.h net/tipc: fix tipc header files for kernel-doc 2023-05-30 12:57:52 +01:00
diag.c
discover.c tipc: check skb_linearize() return value in tipc_disc_rcv() 2022-12-02 17:40:01 +01:00
discover.h
eth_media.c
group.c
group.h
ib_media.c
Kconfig
link.c tipc: Use size_add() in calls to struct_size() 2023-11-20 11:06:44 +01:00
link.h tipc: simplify the finalize work queue 2022-06-29 08:59:47 +02:00
Makefile
monitor.c tipc: fix shift wrapping bug in map_get() 2022-09-15 11:32:05 +02:00
monitor.h
msg.c tipc: fix UAF in error path 2024-05-17 11:48:10 +02:00
msg.h net: tipc: fix FB_MTU eat two pages 2021-07-14 16:56:32 +02:00
name_distr.c tipc: rate limit warning for received illegal binding update 2022-02-16 12:54:26 +01:00
name_distr.h net/tipc: fix tipc header files for kernel-doc 2023-05-30 12:57:52 +01:00
name_table.c tipc: Fix end of loop tests for list_for_each_entry() 2022-03-02 11:42:49 +01:00
name_table.h net/tipc: fix tipc header files for kernel-doc 2023-05-30 12:57:52 +01:00
net.c tipc: simplify the finalize work queue 2022-06-29 08:59:47 +02:00
net.h
netlink_compat.c tipc: Fix kernel-infoleak due to uninitialized TLV value 2023-11-28 16:54:54 +00:00
netlink.c tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING 2023-11-20 11:06:55 +01:00
netlink.h
node.c tipc: force a dst refcount before doing decryption 2024-07-05 09:12:38 +02:00
node.h
socket.c net: deal with most data-races in sk_wait_event() 2023-05-30 12:57:46 +01:00
socket.h
subscr.c
subscr.h net/tipc: fix tipc header files for kernel-doc 2023-05-30 12:57:52 +01:00
sysctl.c
topsrv.c tipc: add an extra conn_get in tipc_conn_alloc 2022-12-02 17:40:01 +01:00
topsrv.h
trace.c
trace.h
udp_media.c tipc: Return non-zero value from tipc_udp_addr2str() on error 2024-08-19 05:41:04 +02:00
udp_media.h