Mateusz Jurczyk 47644ea6cf caif: Add sockaddr length check before accessing sa_family in connect handler ...

Verify that the caller-provided sockaddr structure is large enough to
contain the sa_family field, before accessing it in the connect()
handler of the AF_CAIF socket. Since the syscall doesn't enforce a minimum
size of the corresponding memory region, very short sockaddrs (zero or one
byte long) result in operating on uninitialized memory while referencing
sa_family.

Change-Id: I19e8282cf2d2acf418d69f2380b319203fd23a84
Signed-off-by: Mateusz Jurczyk <mjurczyk@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>

2019-08-08 12:09:32 +02:00

..

caif_dev.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

caif_socket.c

caif: Add sockaddr length check before accessing sa_family in connect handler

2019-08-08 12:09:32 +02:00

caif_usb.c

…

cfcnfg.c

…

cfctrl.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

cfdbgl.c

…

cfdgml.c

…

cffrml.c

…

cfmuxl.c

…

cfpkt_skbuff.c

…

cfrfml.c

…

cfserl.c

…

cfsrvl.c

…

cfutill.c

…

cfveil.c

…

cfvidl.c

…

chnl_net.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

Kconfig

…

Makefile

…