Hoang Le 7f36f798f8 tipc: check attribute length for bearer name ... syzbot reported uninit-value: ===================================================== BUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:644 [inline] BUG: KMSAN: uninit-value in string+0x4f9/0x6f0 lib/vsprintf.c:725 string_nocheck lib/vsprintf.c:644 [inline] string+0x4f9/0x6f0 lib/vsprintf.c:725 vsnprintf+0x2222/0x3650 lib/vsprintf.c:2806 vprintk_store+0x537/0x2150 kernel/printk/printk.c:2158 vprintk_emit+0x28b/0xab0 kernel/printk/printk.c:2256 vprintk_default+0x86/0xa0 kernel/printk/printk.c:2283 vprintk+0x15f/0x180 kernel/printk/printk_safe.c:50 _printk+0x18d/0x1cf kernel/printk/printk.c:2293 tipc_enable_bearer net/tipc/bearer.c:371 [inline] __tipc_nl_bearer_enable+0x2022/0x22a0 net/tipc/bearer.c:1033 tipc_nl_bearer_enable+0x6c/0xb0 net/tipc/bearer.c:1042 genl_family_rcv_msg_doit net/netlink/genetlink.c:731 [inline] - Do sanity check the attribute length for TIPC_NLA_BEARER_NAME. - Do not use 'illegal name' in printing message. Reported-by: syzbot+e820fdc8ce362f2dea51@syzkaller.appspotmail.com Fixes: cb30a63384 ("tipc: refactor function tipc_enable_bearer()") Acked-by: Jon Maloy <jmaloy@redhat.com> Signed-off-by: Hoang Le <hoang.h.le@dektech.com.au> Link: https://lore.kernel.org/r/20220602063053.5892-1-hoang.h.le@dektech.com.au Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2022-06-02 10:14:24 -07:00
..
Kconfig	…
Makefile	…
addr.c	tipc: introduce new unified address type for internal use	2021-03-17 11:51:04 -07:00
addr.h	tipc: introduce new unified address type for internal use	2021-03-17 11:51:04 -07:00
bcast.c	net: tipc: fix FB_MTU eat two pages	2021-06-28 13:31:57 -07:00
bcast.h	…
bearer.c	tipc: check attribute length for bearer name	2022-06-02 10:14:24 -07:00
bearer.h	tipc: constify dev_addr passing	2021-10-13 09:40:46 -07:00
core.c	tipc: simplify the finalize work queue	2021-05-18 13:22:09 -07:00
core.h	tipc: simplify the finalize work queue	2021-05-18 13:22:09 -07:00
crypto.c	tipc: fix a bit overflow in tipc_crypto_key_rcv()	2022-02-13 12:12:25 +00:00
crypto.h	…
diag.c	…
discover.c	tipc: simplify the finalize work queue	2021-05-18 13:22:09 -07:00
discover.h	…
eth_media.c	tipc: constify dev_addr passing	2021-10-13 09:40:46 -07:00
group.c	…
group.h	…
ib_media.c	tipc: constify dev_addr passing	2021-10-13 09:40:46 -07:00
link.c	tipc: fix incorrect order of state message data sanity check	2022-03-08 22:18:42 -08:00
link.h	tipc: simplify the finalize work queue	2021-05-18 13:22:09 -07:00
monitor.c	tipc: improve size validations for received domain records	2022-02-10 05:37:44 -08:00
monitor.h	…
msg.c	net: tipc: replace align() with ALIGN in msg.c	2021-06-28 13:31:57 -07:00
msg.h	net: tipc: remove unused static inlines	2022-01-27 13:53:27 +00:00
name_distr.c	tipc: rate limit warning for received illegal binding update	2022-02-09 12:48:22 +00:00
name_distr.h	…
name_table.c	tipc: Fix end of loop tests for list_for_each_entry()	2022-02-23 12:35:40 +00:00
name_table.h	tipc: simplify handling of lookup scope during multicast message reception	2021-06-03 14:06:39 -07:00
net.c	tipc: simplify the finalize work queue	2021-05-18 13:22:09 -07:00
net.h	…
netlink.c	…
netlink.h	…
netlink_compat.c	tipc: convert dest node's address to network order	2021-03-11 18:06:54 -08:00
node.c	tipc: fix wrong notification node addresses	2022-02-16 20:44:40 -08:00
node.h	…
socket.c	tipc: fix the timer expires after interval 100ms	2022-03-22 10:50:46 +01:00
socket.h	…
subscr.c	tipc:subscr.c: fix a spelling mistake	2021-06-10 13:48:43 -07:00
subscr.h	tipc: fix htmldoc and smatch warnings	2021-03-29 16:28:50 -07:00
sysctl.c	…
topsrv.c	…
topsrv.h	…
trace.c	…
trace.h	…
udp_media.c	tipc: wait and exit until all work queues are done	2021-05-17 14:07:48 -07:00
udp_media.h	…