linux/drivers/net/ppp
Dmitry Antipov f2aeb7306a ppp: reject claimed-as-LCP but actually malformed packets
Since 'ppp_async_encode()' assumes valid LCP packets (with code
from 1 to 7 inclusive), add 'ppp_check_packet()' to ensure that
LCP packet has an actual body beyond PPP_LCP header bytes, and
reject claimed-as-LCP but actually malformed data otherwise.

Reported-by: syzbot+ec0723ba9605678b14bf@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=ec0723ba9605678b14bf
Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Signed-off-by: Dmitry Antipov <dmantipov@yandex.ru>
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
2024-07-11 11:00:08 +02:00
..
bsd_comp.c net: fill in MODULE_DESCRIPTION()s for ppp 2024-02-15 08:03:46 -08:00
Kconfig net/pppoe: fix a typo for the PPPOE_HASH_BITS_1 definition 2023-06-06 13:28:30 +02:00
Makefile
ppp_async.c net: fill in MODULE_DESCRIPTION()s for ppp 2024-02-15 08:03:46 -08:00
ppp_deflate.c net: fill in MODULE_DESCRIPTION()s for ppp 2024-02-15 08:03:46 -08:00
ppp_generic.c ppp: reject claimed-as-LCP but actually malformed packets 2024-07-11 11:00:08 +02:00
ppp_mppe.c mm, treewide: rename kzfree() to kfree_sensitive() 2020-08-07 11:33:22 -07:00
ppp_mppe.h
ppp_synctty.c net: fill in MODULE_DESCRIPTION()s for ppp 2024-02-15 08:03:46 -08:00
pppoe.c pppoe: Fix memory leak in pppoe_sendmsg() 2024-02-15 07:50:32 -08:00
pppox.c compat_ioctl: pppoe: fix PPPOEIOCSFWD handling 2019-07-30 14:42:13 -07:00
pptp.c Normalise "name (ad@dr)" MODULE_AUTHORs to "name <ad@dr>" 2024-03-06 13:07:39 -08:00