netdev - Re: [PATCH net 0/2] limit sk

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20160713.115720.1957329060122160316.davem@davemloft.net>
Date:	Wed, 13 Jul 2016 11:57:20 -0700 (PDT)
From:	David Miller <davem@...emloft.net>
To:	willemdebruijn.kernel@...il.com
Cc:	netdev@...r.kernel.org, alexei.starovoitov@...il.com,
	daniel@...earbox.net, hannes@...essinduktion.org,
	eric.dumazet@...il.com, willemb@...gle.com
Subject: Re: [PATCH net 0/2] limit sk_filter trim to payload

From: Willem de Bruijn <willemdebruijn.kernel@...il.com>
Date: Tue, 12 Jul 2016 18:18:55 -0400

> From: Willem de Bruijn <willemb@...gle.com>
> 
> Sockets can apply a filter to incoming packets to drop or trim them.
> Fix two codepaths that call skb_pull/__skb_pull after sk_filter
> without checking for packet length.
> 
> Reading beyond skb->tail after trimming happens in more codepaths, but
> safety of reading in the linear segment is based on minimum allocation
> size (MAX_HEADER, GRO_MAX_HEAD, ..).

Series applied and queued up for -stable, thanks.