Skip to content

GitLab

Switch branch/tag
History Find file
Clone
airo: Fix read overflows sending packets
Dan Carpenter authored 
commit 11e7a919

 upstream.

The problem is that we always copy a minimum of ETH_ZLEN (60) bytes from
skb->data even when skb->len is less than ETH_ZLEN so it leads to a read
overflow.

The fix is to pad skb->data to at least ETH_ZLEN bytes.

Cc: <stable@vger.kernel.org>
Reported-by: default avatarHu Jiahui <kirin.say@gmail.com>
Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: default avatarEric Dumazet <edumazet@google.com>
Signed-off-by: default avatarKalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20200527184830.GA1164846@mwanda

Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
74028c9c
Name Last commit Last update
Documentation USB: hub: Revert commit bd0e6c96 ("usb: hub: try old enumeration scheme first for high speed devices")
LICENSES LICENSES: Rename other to deprecated
arch mm: Fix mremap not considering huge pmd devmap
block Revert "block: end bio with BLK_STS_AGAIN in case of non-mq devs and REQ_NOWAIT"
certs PKCS#7: Refactor verify_pkcs7_signature()
crypto gcc-10: avoid shadowing standard library 'free()' in crypto
drivers airo: Fix read overflows sending packets
fs fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
include mmc: fix compilation of user API
init x86: Fix early boot crash on gcc-10, third try
ipc ipc/util.c: sysvipc_find_ipc() incorrectly updates position index
kernel kernel/relay.c: handle alloc_percpu returning NULL in relay_open
lib vsprintf: don't obfuscate NULL and error pointers
mm mm: Fix mremap not considering huge pmd devmap
net netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build
samples samples: bpf: Fix build error
scripts kbuild: Remove debug info from kallsyms linking
security exec: Always set cap_ambient in cap_bprm_set_creds
sound ALSA: hda/realtek - Add new codec supported for ALC287
tools perf: Make perf able to build with latest libbfd
usr initramfs: restore default compression behavior
virt KVM: arm: vgic: Synchronize the whole guest on GIC{D,R}_I{S,C}ACTIVER read
.clang-format clang-format: Update with the latest for_each macro list
.cocciconfig scripts: add Linux .cocciconfig for coccinelle
.get_maintainer.ignore Opt out of scripts/get_maintainer.pl
.gitattributes .gitattributes: set git diff driver for C source code files
.gitignore Merge tag 'modules-for-v5.4' of git://git.kernel.org/pub/scm/linux/kernel/git/jeyu/linux
.mailmap Merge tag 'armsoc-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc
COPYING COPYING: use the new text with points to the license files
CREDITS MAINTAINERS: Remove Simon as Renesas SoC Co-Maintainer
Kbuild kbuild: do not descend to ./Kbuild when cleaning
Kconfig docs: kbuild: convert docs to ReST and rename to *.rst
MAINTAINERS MAINTAINERS: Update drm/i915 bug filing URL
Makefile Linux 5.4.44
README Drop all 00-INDEX files from Documentation/
README
Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.