Jeremy Cline bc5b6c0b62 netlink: Fix spectre v1 gadget in netlink_create() ... 'protocol' is a user-controlled value, so sanitize it after the bounds check to avoid using it for speculative out-of-bounds access to arrays indexed by it. This addresses the following accesses detected with the help of smatch: * net/netlink/af_netlink.c:654 __netlink_create() warn: potential spectre issue 'nlk_cb_mutex_keys' [w] * net/netlink/af_netlink.c:654 __netlink_create() warn: potential spectre issue 'nlk_cb_mutex_key_strings' [w] * net/netlink/af_netlink.c:685 netlink_create() warn: potential spectre issue 'nl_table' [w] (local cap) Cc: Josh Poimboeuf <jpoimboe@redhat.com> Signed-off-by: Jeremy Cline <jcline@redhat.com> Reviewed-by: Josh Poimboeuf <jpoimboe@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2018-08-01 09:50:58 -07:00
..
af_netlink.c	netlink: Fix spectre v1 gadget in netlink_create()	2018-08-01 09:50:58 -07:00
af_netlink.h	af_netlink: ensure that NLMSG_DONE never fails in dumps	2017-11-13 10:17:13 +09:00
diag.c	rhashtable: Change rhashtable_walk_start to return void	2017-12-11 09:58:38 -05:00
genetlink.c	treewide: kmalloc() -> kmalloc_array()	2018-06-12 16:19:22 -07:00
Kconfig	netlink: remove mmapped netlink support	2016-02-18 11:42:18 -05:00
Makefile	netlink: Diag core and basic socket info dumping (v2)	2013-03-21 12:38:03 -04:00