Re: [PATCH net] net: validate attribute sizes in neigh_dump_table()

2018-04-12 Thread David Miller
From: Eric Dumazet Date: Wed, 11 Apr 2018 14:46:00 -0700 > Since neigh_dump_table() calls nlmsg_parse() without giving policy > constraints, attributes can have arbirary size that we must validate > > Reported by syzbot/KMSAN : ... > Fixes: 21fdd092acc7 ("net: Add support for filtering neigh du

Re: [PATCH net] net: validate attribute sizes in neigh_dump_table()

2018-04-11 Thread David Ahern
On 4/11/18 3:46 PM, Eric Dumazet wrote: > Since neigh_dump_table() calls nlmsg_parse() without giving policy > constraints, attributes can have arbirary size that we must validate > ... > > Fixes: 21fdd092acc7 ("net: Add support for filtering neigh dump by master > device") > Signed-off-by: Er

[PATCH net] net: validate attribute sizes in neigh_dump_table()

2018-04-11 Thread Eric Dumazet
Since neigh_dump_table() calls nlmsg_parse() without giving policy constraints, attributes can have arbirary size that we must validate Reported by syzbot/KMSAN : BUG: KMSAN: uninit-value in neigh_master_filtered net/core/neighbour.c:2292 [inline] BUG: KMSAN: uninit-value in neigh_dump_table net