lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Tue, 15 Dec 2020 03:10:48 +0000 From: patchwork-bot+netdevbpf@...nel.org To: Vasily Averin <vvs@...tuozzo.com> Cc: willemdebruijn.kernel@...il.com, davem@...emloft.net, kuba@...nel.org, netdev@...r.kernel.org Subject: Re: [PATCH v2] net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet Hello: This patch was applied to netdev/net-next.git (refs/heads/master): On Mon, 14 Dec 2020 22:07:39 +0300 you wrote: > syzbot reproduces BUG_ON in skb_checksum_help(): > tun creates (bogus) skb with huge partial-checksummed area and > small ip packet inside. Then ip_rcv trims the skb based on size > of internal ip packet, after that csum offset points beyond of > trimmed skb. Then checksum_tg() called via netfilter hook > triggers BUG_ON: > > [...] Here is the summary with links: - [v2] net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet https://git.kernel.org/netdev/net-next/c/54970a2fbb67 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html
Powered by blists - more mailing lists