https://github.com/torvalds/linux
Revision 8f659a03a0ba9289b9aeb9b4470e6fb263d6f483 authored by Mohamed Ghannam on 10 December 2017, 03:50:58 UTC, committed by David S. Miller on 11 December 2017, 19:05:31 UTC
inet->hdrincl is racy, and could lead to uninitialized stack pointer
usage, so its value should be read only once.

Fixes: c008ba5bdc9f ("ipv4: Avoid reading user iov twice after raw_probe_proto_opt")
Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 93c6476
History
Tip revision: 8f659a03a0ba9289b9aeb9b4470e6fb263d6f483 authored by Mohamed Ghannam on 10 December 2017, 03:50:58 UTC
net: ipv4: fix for a race condition in raw_sendmsg
Tip revision: 8f659a0
File Mode Size
ChangeLog -rw-r--r-- 14.0 KB
Kconfig -rw-r--r-- 917 bytes
Makefile -rw-r--r-- 206 bytes
TODO -rw-r--r-- 385 bytes
befs.h -rw-r--r-- 3.0 KB
befs_fs_types.h -rw-r--r-- 5.0 KB
btree.c -rw-r--r-- 21.9 KB
btree.h -rw-r--r-- 343 bytes
datastream.c -rw-r--r-- 15.9 KB
datastream.h -rw-r--r-- 575 bytes
debug.c -rw-r--r-- 7.1 KB
endian.h -rw-r--r-- 3.2 KB
inode.c -rw-r--r-- 1.2 KB
inode.h -rw-r--r-- 120 bytes
io.c -rw-r--r-- 1.4 KB
io.h -rw-r--r-- 110 bytes
linuxvfs.c -rw-r--r-- 25.6 KB
super.c -rw-r--r-- 3.3 KB
super.h -rw-r--r-- 131 bytes

back to top