netdev - [PATCH net 0/2] net: ipv4: Prevent user triggerable warning

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20181220170231.23382-1-idosch@mellanox.com>
Date:   Thu, 20 Dec 2018 17:03:26 +0000
From:   Ido Schimmel <idosch@...lanox.com>
To:     "netdev@...r.kernel.org" <netdev@...r.kernel.org>
CC:     "davem@...emloft.net" <davem@...emloft.net>,
        "willemb@...gle.com" <willemb@...gle.com>,
        "dsahern@...il.com" <dsahern@...il.com>,
        Alexander Petrovskiy <alexpe@...lanox.com>,
        Ido Schimmel <idosch@...lanox.com>
Subject: [PATCH net 0/2] net: ipv4: Prevent user triggerable warning

Patch #1 prevents a user triaggerable warning in the flow dissector by
setting 'skb->dev' in skbs used for IPv4 output route get requests.

Patch #2 adds a test case that triggers the warning without the first
patch.

I have audited all the RTM_GETROUTE handlers and could not find any
other callpath where an skb is passed to the flow dissector with both
'skb->dev' and 'skb->sk' cleared.

Ido Schimmel (2):
  net: ipv4: Set skb->dev for output route resolution
  selftests: rtnetlink: Add a test case for multipath route get

 net/ipv4/route.c                         |  1 +
 tools/testing/selftests/net/rtnetlink.sh | 15 +++++++++++++++
 2 files changed, 16 insertions(+)

-- 
2.20.0