mbox series

[net,0/3] net/smc: fixes 2022-04-08

Message ID 20220408151035.1044701-1-kgraul@linux.ibm.com (mailing list archive)
Headers show
Series net/smc: fixes 2022-04-08 | expand

Message

Karsten Graul April 8, 2022, 3:10 p.m. UTC 
Please apply the following patches to netdev's net tree.

Patch 1 fixes two usages of snprintf() with non null-terminated
string which results into an out-of-bounds read.
Pach 2 fixes a syzbot finding where a pointer check was missed
before the call to dev_name().
Patch 3 fixes a crash when already released memory is used as
a function pointer.

Karsten Graul (3):
  net/smc: use memcpy instead of snprintf to avoid out of bounds read
  net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
  net/smc: Fix af_ops of child socket pointing to released memory

 net/smc/af_smc.c   | 14 ++++++++++++--
 net/smc/smc_clc.c  |  6 ++++--
 net/smc/smc_pnet.c |  5 +++--
 3 files changed, 19 insertions(+), 6 deletions(-)

Comments

patchwork-bot+netdevbpf@kernel.org April 12, 2022, 1:40 a.m. UTC | #1 
Hello:

This series was applied to netdev/net.git (master)
by Jakub Kicinski <kuba@kernel.org>:

On Fri,  8 Apr 2022 17:10:32 +0200 you wrote:
> Please apply the following patches to netdev's net tree.
> 
> Patch 1 fixes two usages of snprintf() with non null-terminated
> string which results into an out-of-bounds read.
> Pach 2 fixes a syzbot finding where a pointer check was missed
> before the call to dev_name().
> Patch 3 fixes a crash when already released memory is used as
> a function pointer.
> 
> [...]

Here is the summary with links:
  - [net,1/3] net/smc: use memcpy instead of snprintf to avoid out of bounds read
    https://git.kernel.org/netdev/net/c/b1871fd48efc
  - [net,2/3] net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
    https://git.kernel.org/netdev/net/c/d22f4f977236
  - [net,3/3] net/smc: Fix af_ops of child socket pointing to released memory
    https://git.kernel.org/netdev/net/c/49b7d376abe5

You are awesome, thank you!