kernel-hacking-2024-linux-s.../net/tipc
Tung Nguyen c79fcc27be tipc: fix incorrect order of state message data sanity check
When receiving a state message, function tipc_link_validate_msg()
is called to validate its header portion. Then, its data portion
is validated before it can be accessed correctly. However, current
data sanity  check is done after the message header is accessed to
update some link variables.

This commit fixes this issue by moving the data sanity check to
the beginning of state message handling and right after the header
sanity check.

Fixes: 9aa422ad32 ("tipc: improve size validations for received domain records")
Acked-by: Jon Maloy <jmaloy@redhat.com>
Signed-off-by: Tung Nguyen <tung.q.nguyen@dektech.com.au>
Link: https://lore.kernel.org/r/20220308021200.9245-1-tung.q.nguyen@dektech.com.au
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2022-03-08 22:18:42 -08:00
..
addr.c
addr.h
bcast.c
bcast.h
bearer.c tipc: fix kernel panic when enabling bearer 2022-03-04 13:19:13 +00:00
bearer.h tipc: constify dev_addr passing 2021-10-13 09:40:46 -07:00
core.c
core.h
crypto.c tipc: fix a bit overflow in tipc_crypto_key_rcv() 2022-02-13 12:12:25 +00:00
crypto.h
diag.c
discover.c
discover.h
eth_media.c tipc: constify dev_addr passing 2021-10-13 09:40:46 -07:00
group.c
group.h
ib_media.c tipc: constify dev_addr passing 2021-10-13 09:40:46 -07:00
Kconfig
link.c tipc: fix incorrect order of state message data sanity check 2022-03-08 22:18:42 -08:00
link.h
Makefile
monitor.c tipc: improve size validations for received domain records 2022-02-10 05:37:44 -08:00
monitor.h
msg.c
msg.h
name_distr.c tipc: rate limit warning for received illegal binding update 2022-02-09 12:48:22 +00:00
name_distr.h
name_table.c tipc: Fix end of loop tests for list_for_each_entry() 2022-02-23 12:35:40 +00:00
name_table.h
net.c
net.h
netlink.c
netlink.h
netlink_compat.c
node.c tipc: fix wrong notification node addresses 2022-02-16 20:44:40 -08:00
node.h
socket.c tipc: Fix end of loop tests for list_for_each_entry() 2022-02-23 12:35:40 +00:00
socket.h
subscr.c
subscr.h
sysctl.c
topsrv.c
topsrv.h
trace.c
trace.h
udp_media.c
udp_media.h