linux/net/tipc
Shigeru Yoshida 7287343527 tipc: Return non-zero value from tipc_udp_addr2str() on error
[ Upstream commit fa96c6baef ]

tipc_udp_addr2str() should return non-zero value if the UDP media
address is invalid. Otherwise, a buffer overflow access can occur in
tipc_media_addr_printf(). Fix this by returning 1 on an invalid UDP
media address.

Fixes: d0f91938be ("tipc: add ip/udp media type")
Signed-off-by: Shigeru Yoshida <syoshida@redhat.com>
Reviewed-by: Tung Nguyen <tung.q.nguyen@endava.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-08-03 08:49:50 +02:00
..
addr.c
addr.h
bcast.c
bcast.h
bearer.c tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() 2024-02-16 19:06:27 +01:00
bearer.h tipc: add tipc_bearer_min_mtu to calculate min mtu 2023-05-24 17:32:45 +01:00
core.c tipc: fix use-after-free Read in tipc_named_reinit 2022-06-17 11:39:10 +01:00
core.h
crypto.c tipc: fix a potential deadlock on &tx->lock 2023-10-10 22:00:43 +02:00
crypto.h
diag.c
discover.c tipc: check skb_linearize() return value in tipc_disc_rcv() 2022-11-21 20:50:24 -08:00
discover.h
eth_media.c
group.c
group.h
ib_media.c
Kconfig
link.c tipc: Use size_add() in calls to struct_size() 2023-11-20 11:51:52 +01:00
link.h
Makefile
monitor.c tipc: fix shift wrapping bug in map_get() 2022-09-02 12:26:29 +01:00
monitor.h
msg.c tipc: fix UAF in error path 2024-05-17 11:56:20 +02:00
msg.h
name_distr.c net/tipc: Remove unused struct distr_queue_item 2022-09-29 18:48:32 -07:00
name_distr.h
name_table.c tipc: cleanup unused function 2022-06-17 11:43:57 +01:00
name_table.h tipc: cleanup unused function 2022-06-17 11:43:57 +01:00
net.c
net.h
netlink_compat.c tipc: Fix kernel-infoleak due to uninitialized TLV value 2023-11-28 17:07:05 +00:00
netlink.c tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING 2023-11-20 11:52:15 +01:00
netlink.h
node.c tipc: force a dst refcount before doing decryption 2024-06-27 13:46:19 +02:00
node.h
socket.c net: deal with most data-races in sk_wait_event() 2023-05-24 17:32:32 +01:00
socket.h
subscr.c
subscr.h
sysctl.c
topsrv.c use less confusing names for iov_iter direction initializers 2023-02-09 11:28:04 +01:00
topsrv.h
trace.c
trace.h
udp_media.c tipc: Return non-zero value from tipc_udp_addr2str() on error 2024-08-03 08:49:50 +02:00
udp_media.h