Commit 2bc6808a authored by Mohamed Ghannam's avatar Mohamed Ghannam Committed by Todd Kjos
Browse files

net: ipv4: fix for a race condition in raw_sendmsg



[ Upstream commit 8f659a03 ]

inet->hdrincl is racy, and could lead to uninitialized stack pointer
usage, so its value should be read only once.

Change-Id: Ic3e4e1d3f6762e83db06c2bf52dd0923286ce2cc
Fixes: c008ba5b ("ipv4: Avoid reading user iov twice after raw_probe_proto_opt")
Signed-off-by: default avatarMohamed Ghannam <simo.ghannam@gmail.com>
Reviewed-by: default avatarEric Dumazet <edumazet@google.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 4b480741
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment