Kal Conley 3ee343914c xsk: Fix unaligned descriptor validation ... [ Upstream commit d769ccaf95 ] Make sure unaligned descriptors that straddle the end of the UMEM are considered invalid. Currently, descriptor validation is broken for zero-copy mode which only checks descriptors at page granularity. For example, descriptors in zero-copy mode that overrun the end of the UMEM but not a page boundary are (incorrectly) considered valid. The UMEM boundary check needs to happen before the page boundary and contiguity checks in xp_desc_crosses_non_contig_pg(). Do this check in xp_unaligned_validate_desc() instead like xp_check_unaligned() already does. Fixes: 2b43470add ("xsk: Introduce AF_XDP buffer allocation API") Signed-off-by: Kal Conley <kal.conley@dectris.com> Acked-by: Magnus Karlsson <magnus.karlsson@intel.com> Link: https://lore.kernel.org/r/20230405235920.7305-2-kal.conley@dectris.com Signed-off-by: Martin KaFai Lau <martin.lau@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-05-11 23:03:21 +09:00
..
6lowpan
9p	9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition	2023-04-20 12:35:08 +02:00
802	mrp: introduce active flags to prevent UAF when applicant uninit	2022-12-31 13:33:02 +01:00
8021q	vlan: partially enable SIOCSHWTSTAMP in container	2023-05-11 23:03:18 +09:00
appletalk
atm	net/atm: fix proc_mpc_write incorrect return value	2022-10-15 11:08:36 +01:00
ax25
batman-adv
bluetooth	bluetooth: Perform careful capability checks in hci_sock_ioctl()	2023-05-01 08:26:27 +09:00
bpf	Revert "bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES"	2023-03-17 08:50:32 +01:00
bpfilter
bridge	net: bridge: switchdev: don't notify FDB entries with "master dynamic"	2023-04-26 14:28:35 +02:00
caif	net: caif: Fix use-after-free in cfusbl_device_notify()	2023-03-17 08:50:24 +01:00
can	can: isotp: isotp_recvmsg(): use sock_recv_cmsgs() to get SOCK_RXQ_OVFL infos	2023-04-13 16:55:33 +02:00
ceph	use less confusing names for iov_iter direction initializers	2023-02-09 11:28:04 +01:00
core	skbuff: Fix a race between coalescing and releasing SKBs	2023-04-20 12:35:10 +02:00
dcb
dccp	netfilter: keep conntrack reference until IPsecv6 policy checks are done	2023-05-11 23:03:18 +09:00
dns_resolver
dsa	net: dsa: tag_brcm: legacy: fix daisy-chained switches	2023-03-30 12:49:09 +02:00
ethernet
ethtool	ethtool: reset #lanes when lanes is omitted	2023-04-13 16:55:24 +02:00
hsr	hsr: ratelimit only when errors are printed	2023-04-06 12:10:58 +02:00
ieee802154	net: ieee802154: fix error return code in dgram_bind()	2022-10-07 09:29:17 +02:00
ife
ipv4	tcp: restrict net.ipv4.tcp_app_win	2023-04-20 12:35:08 +02:00
ipv6	netfilter: keep conntrack reference until IPsecv6 policy checks are done	2023-05-11 23:03:18 +09:00
iucv	net/iucv: Fix size of interrupt data	2023-03-22 13:33:50 +01:00
kcm	kcm: close race conditions on sk_receive_queue	2022-11-15 12:42:26 +01:00
key	xfrm: Fix oops in __xfrm_state_delete()	2022-11-22 07:14:55 +01:00
l2tp	inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().	2023-04-26 14:28:43 +02:00
l3mdev
lapb
llc
mac80211	wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta	2023-04-13 16:55:19 +02:00
mac802154	mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()	2022-12-05 09:53:08 +01:00
mctp	net: mctp: purge receive queues on sk destruction	2023-02-06 08:06:34 +01:00
mpls	net: mpls: fix stale pointer if allocation fails during device rename	2023-02-22 12:59:53 +01:00
mptcp	mptcp: fix accept vs worker race	2023-05-01 08:26:27 +09:00
ncsi
netfilter	netfilter: nf_tables: tighten netlink attribute requirements for catch-all elements	2023-04-26 14:28:34 +02:00
netlabel
netlink	netlink: annotate lockless accesses to nlk->max_recvmsg_len	2023-04-13 16:55:24 +02:00
netrom	netrom: Fix use-after-free caused by accept on already connected socket	2023-02-09 11:28:06 +01:00
nfc	nfc: change order inside nfc_se_io error path	2023-03-17 08:50:17 +01:00
nsh
openvswitch	net: openvswitch: fix race on port output	2023-04-20 12:35:09 +02:00
packet	net/packet: convert po->auxdata to an atomic flag	2023-05-11 23:03:18 +09:00
phonet
psample
qrtr	net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()	2023-04-20 12:35:09 +02:00
rds	rds: rds_rm_zerocopy_callback() correct order for list_add_tail()	2023-03-10 09:33:02 +01:00
rfkill
rose	net/rose: Fix to not accept on connected socket	2023-02-22 12:59:42 +01:00
rxrpc	rxrpc: Fix missing unlock in rxrpc_do_sendmsg()	2022-12-31 13:32:55 +01:00
sched	net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg	2023-04-26 14:28:32 +02:00
sctp	sctp: Call inet6_destroy_sock() via sk->sk_destruct().	2023-04-26 14:28:43 +02:00
smc	net/smc: fix deadlock triggered by cancel_delayed_work_syn()	2023-03-22 13:33:47 +01:00
strparser
sunrpc	sunrpc: only free unix grouplist after RCU settles	2023-04-13 16:55:23 +02:00
switchdev
tipc	tipc: fix kernel warning when sending SYN message	2023-02-22 12:59:53 +01:00
tls	net: tls: fix device-offloaded sendpage straddling records	2023-03-17 08:50:26 +01:00
unix	af_unix: fix struct pid leaks in OOB support	2023-03-17 08:50:28 +01:00
vmw_vsock	net: vmw_vsock: vmci: Check memcpy_from_msg()	2022-12-31 13:32:26 +01:00
wireless	wifi: cfg80211: fix MLO connection ownership	2023-03-22 13:33:43 +01:00
x25	net/x25: Fix to not accept on connected socket	2023-02-09 11:28:13 +01:00
xdp	xsk: Fix unaligned descriptor validation	2023-05-11 23:03:21 +09:00
xfrm	xfrm: Zero padding when dumping algos and encap	2023-04-06 12:10:37 +02:00
compat.c	use less confusing names for iov_iter direction initializers	2023-02-09 11:28:04 +01:00
devres.c
Kconfig
Kconfig.debug
Makefile
socket.c	net: avoid double iput when sock_alloc_file fails	2023-03-10 09:34:34 +01:00
sysctl_net.c