netdev - Re: [net] tcp: Fix sign comparison bug in getsockopt(TCP_ZEROCOPY

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <161438340843.31866.11887686015275071765.git-patchwork-notify@kernel.org>
Date:   Fri, 26 Feb 2021 23:50:08 +0000
From:   patchwork-bot+netdevbpf@...nel.org
To:     Arjun Roy <arjunroy.kdev@...il.com>
Cc:     davem@...emloft.net, netdev@...r.kernel.org, arjunroy@...gle.com,
        edumazet@...gle.com, soheil@...gle.com, lkp@...el.com,
        dan.carpenter@...cle.com
Subject: Re: [net] tcp: Fix sign comparison bug in
 getsockopt(TCP_ZEROCOPY_RECEIVE)

Hello:

This patch was applied to netdev/net.git (refs/heads/master):

On Thu, 25 Feb 2021 15:26:28 -0800 you wrote:
> From: Arjun Roy <arjunroy@...gle.com>
> 
> getsockopt(TCP_ZEROCOPY_RECEIVE) has a bug where we read a
> user-provided "len" field of type signed int, and then compare the
> value to the result of an "offsetofend" operation, which is unsigned.
> 
> Negative values provided by the user will be promoted to large
> positive numbers; thus checking that len < offsetofend() will return
> false when the intention was that it return true.
> 
> [...]

Here is the summary with links:
  - [net] tcp: Fix sign comparison bug in getsockopt(TCP_ZEROCOPY_RECEIVE)
    https://git.kernel.org/netdev/net/c/2107d45f17be

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html