linux-kernel - Re: [PATCH] LoongArch: csum: Fix OoB access in IP checksum code for negative lengths

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAAhV-H7TxBz83un_93rZ-4PmYG=3w6dMsekc35d=FMkRyT+Z9A@mail.gmail.com>
Date: Mon, 10 Feb 2025 21:05:37 +0800
From: Huacai Chen <chenhuacai@...nel.org>
To: WangYuli <wangyuli@...ontech.com>
Cc: kernel@...0n.name, guanwentao@...ontech.com, loongarch@...ts.linux.dev, 
	linux-kernel@...r.kernel.org, maobibo@...ngson.cn, zhanjun@...ontech.com, 
	chenlinxuan@...ontech.com
Subject: Re: [PATCH] LoongArch: csum: Fix OoB access in IP checksum code for
 negative lengths

Applied, thanks.

Huacai

On Mon, Feb 10, 2025 at 7:46 PM WangYuli <wangyuli@...ontech.com> wrote:
>
> Commit 69e3a6aa6be2 ("LoongArch: Add checksum optimization for
> 64-bit system") would cause an undefined shift and an out-of-bounds
> read.
>
> Commit 8bd795fedb84 ("arm64: csum: Fix OoB access in IP checksum
> code for negative lengths") fixes the same issue on ARM64.
>
> Fixes: 69e3a6aa6be2 ("LoongArch: Add checksum optimization for 64-bit system")
> Co-developed-by: Wentao Guan <guanwentao@...ontech.com>
> Signed-off-by: Wentao Guan <guanwentao@...ontech.com>
> Signed-off-by: Yuli Wang <wangyuli@...ontech.com>
> ---
>  arch/loongarch/lib/csum.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/arch/loongarch/lib/csum.c b/arch/loongarch/lib/csum.c
> index a5e84b403c3b..df309ae4045d 100644
> --- a/arch/loongarch/lib/csum.c
> +++ b/arch/loongarch/lib/csum.c
> @@ -25,7 +25,7 @@ unsigned int __no_sanitize_address do_csum(const unsigned char *buff, int len)
>         const u64 *ptr;
>         u64 data, sum64 = 0;
>
> -       if (unlikely(len == 0))
> +       if (unlikely(len <= 0))
>                 return 0;
>
>         offset = (unsigned long)buff & 7;
> --
> 2.47.2
>