mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-12 13:55:32 +00:00
![Alexander Aring](/assets/img/avatar_default.png)
This patch initialize stack variables which are used in
frag_lowpan_compare_key to zero. In my case there are padding bytes in the
structures ieee802154_addr as well in frag_lowpan_compare_key. Otherwise
the key variable contains random bytes. The result is that a compare of
two keys by memcmp works incorrect.
Fixes: 648700f76b
("inet: frags: use rhashtables for reassembly units")
Signed-off-by: Alexander Aring <aring@mojatatu.com>
Reported-by: Stefan Schmidt <stefan@osg.samsung.com>
Signed-off-by: Stefan Schmidt <stefan@osg.samsung.com>
48 lines
1.3 KiB
C
48 lines
1.3 KiB
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
#ifndef __IEEE802154_6LOWPAN_I_H__
|
|
#define __IEEE802154_6LOWPAN_I_H__
|
|
|
|
#include <linux/list.h>
|
|
|
|
#include <net/ieee802154_netdev.h>
|
|
#include <net/inet_frag.h>
|
|
#include <net/6lowpan.h>
|
|
|
|
typedef unsigned __bitwise lowpan_rx_result;
|
|
#define RX_CONTINUE ((__force lowpan_rx_result) 0u)
|
|
#define RX_DROP_UNUSABLE ((__force lowpan_rx_result) 1u)
|
|
#define RX_DROP ((__force lowpan_rx_result) 2u)
|
|
#define RX_QUEUED ((__force lowpan_rx_result) 3u)
|
|
|
|
#define LOWPAN_DISPATCH_FRAG1 0xc0
|
|
#define LOWPAN_DISPATCH_FRAGN 0xe0
|
|
|
|
struct frag_lowpan_compare_key {
|
|
u16 tag;
|
|
u16 d_size;
|
|
struct ieee802154_addr src;
|
|
struct ieee802154_addr dst;
|
|
};
|
|
|
|
/* Equivalent of ipv4 struct ipq
|
|
*/
|
|
struct lowpan_frag_queue {
|
|
struct inet_frag_queue q;
|
|
};
|
|
|
|
int lowpan_frag_rcv(struct sk_buff *skb, const u8 frag_type);
|
|
void lowpan_net_frag_exit(void);
|
|
int lowpan_net_frag_init(void);
|
|
|
|
void lowpan_rx_init(void);
|
|
void lowpan_rx_exit(void);
|
|
|
|
int lowpan_header_create(struct sk_buff *skb, struct net_device *dev,
|
|
unsigned short type, const void *_daddr,
|
|
const void *_saddr, unsigned int len);
|
|
netdev_tx_t lowpan_xmit(struct sk_buff *skb, struct net_device *dev);
|
|
|
|
int lowpan_iphc_decompress(struct sk_buff *skb);
|
|
lowpan_rx_result lowpan_rx_h_ipv6(struct sk_buff *skb);
|
|
|
|
#endif /* __IEEE802154_6LOWPAN_I_H__ */
|