mirrors/linux-stable
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2024-09-27 12:57:53 +00:00
Code Issues Releases Wiki Activity

security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce

Browse source 
The asoc created when receives the INIT chunk is a temporary one, it
will be deleted after INIT_ACK chunk is replied. So for the real asoc
created in sctp_sf_do_5_1D_ce() when the COOKIE_ECHO chunk is received,
security_sctp_assoc_request() should also be called.

v1->v2:
  - fix some typo and grammar errors, noticed by Ondrej.

Fixes: 72e89f5008 ("security: Add support for SCTP security hooks")
Reported-by: Prashanth Prahlad <pprahlad@redhat.com>
Reviewed-by: Richard Haines <richard_c_haines@btinternet.com>
Tested-by: Richard Haines <richard_c_haines@btinternet.com>
Signed-off-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Xin Long 2021-11-02 08:02:48 -04:00 committed by David S. Miller
parent c081d53f97
commit e215dab1c4
2 changed files with 14 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
Documentation/security/SCTP.rst
View file

@ -151,9 +151,9 @@ establishing an association.
INIT ---------------------------------------------> INIT --------------------------------------------->
sctp_sf_do_5_1B_init() sctp_sf_do_5_1B_init()
Respond to an INIT chunk. Respond to an INIT chunk.
SCTP peer endpoint "A" is SCTP peer endpoint "A" is asking
asking for an association. Call for a temporary association.
security_sctp_assoc_request() Call security_sctp_assoc_request()
to set the peer label if first to set the peer label if first
association. association.
If not first association, check If not first association, check
@ -163,9 +163,12 @@ establishing an association.
| discard the packet. | discard the packet.
| |
COOKIE ECHO ------------------------------------------> COOKIE ECHO ------------------------------------------>
| sctp_sf_do_5_1D_ce()
| Respond to an COOKIE ECHO chunk.
| Confirm the cookie and create a
permanent association.
Call security_sctp_assoc_request() to
do the same as for INIT chunk Response.
<------------------------------------------- COOKIE ACK <------------------------------------------- COOKIE ACK
| | | |
sctp_sf_do_5_1E_ca | sctp_sf_do_5_1E_ca |

5
net/sctp/sm_statefuns.c
View file

@ -781,6 +781,11 @@ enum sctp_disposition sctp_sf_do_5_1D_ce(struct net *net,
} }
} }
if (security_sctp_assoc_request(new_asoc, chunk->skb)) {
sctp_association_free(new_asoc);
return sctp_sf_pdiscard(net, ep, asoc, type, arg, commands);
}
/* Delay state machine commands until later. /* Delay state machine commands until later.
* *
* Re-build the bind address for the association is done in * Re-build the bind address for the association is done in