https://github.com/torvalds/linux
Revision 8f659a03a0ba9289b9aeb9b4470e6fb263d6f483 authored by Mohamed Ghannam on 10 December 2017, 03:50:58 UTC, committed by David S. Miller on 11 December 2017, 19:05:31 UTC
inet->hdrincl is racy, and could lead to uninitialized stack pointer
usage, so its value should be read only once.

Fixes: c008ba5bdc9f ("ipv4: Avoid reading user iov twice after raw_probe_proto_opt")
Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 93c6476
History
Tip revision: 8f659a03a0ba9289b9aeb9b4470e6fb263d6f483 authored by Mohamed Ghannam on 10 December 2017, 03:50:58 UTC
net: ipv4: fix for a race condition in raw_sendmsg
Tip revision: 8f659a0
File Mode Size
Kconfig -rw-r--r-- 3.2 KB
Makefile -rw-r--r-- 402 bytes
acl.c -rw-r--r-- 8.9 KB
acl.h -rw-r--r-- 1.2 KB
checkpoint.c -rw-r--r-- 35.5 KB
data.c -rw-r--r-- 54.5 KB
debug.c -rw-r--r-- 17.4 KB
dir.c -rw-r--r-- 22.4 KB
extent_cache.c -rw-r--r-- 19.3 KB
f2fs.h -rw-r--r-- 97.0 KB
file.c -rw-r--r-- 65.9 KB
gc.c -rw-r--r-- 26.9 KB
gc.h -rw-r--r-- 3.1 KB
hash.c -rw-r--r-- 2.2 KB
inline.c -rw-r--r-- 15.9 KB
inode.c -rw-r--r-- 16.5 KB
namei.c -rw-r--r-- 29.3 KB
node.c -rw-r--r-- 67.7 KB
node.h -rw-r--r-- 11.9 KB
recovery.c -rw-r--r-- 15.8 KB
segment.c -rw-r--r-- 97.0 KB
segment.h -rw-r--r-- 25.1 KB
shrinker.c -rw-r--r-- 3.3 KB
super.c -rw-r--r-- 71.4 KB
sysfs.c -rw-r--r-- 16.3 KB
trace.c -rw-r--r-- 3.5 KB
trace.h -rw-r--r-- 1013 bytes
xattr.c -rw-r--r-- 17.1 KB
xattr.h -rw-r--r-- 4.7 KB

back to top