Re: [PATCH net] ipv6: sctp: clone options to avoid use after free

From	David Miller <davem@davemloft.net>
Newsgroups	linux.kernel
Subject	Re: [PATCH net] ipv6: sctp: clone options to avoid use after free
Date	2015-12-12 02:20 +0100
Message-ID	<qEH0S-3KF-9@gated-at.bofh.it> (permalink)
References	<qDOnM-1h9-15@gated-at.bofh.it> <qDOH8-1CS-23@gated-at.bofh.it> <qDOQO-1FV-19@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

From: Eric Dumazet <eric.dumazet@gmail.com>
Date: Wed, 09 Dec 2015 07:25:06 -0800

> From: Eric Dumazet <edumazet@google.com>
> 
> SCTP is lacking proper np->opt cloning at accept() time.
> 
> TCP and DCCP use ipv6_dup_options() helper, do the same
> in SCTP.
> 
> We might later factorize this code in a common helper to avoid
> future mistakes.
> 
> Reported-by: Dmitry Vyukov <dvyukov@google.com>
> Signed-off-by: Eric Dumazet <edumazet@google.com>

Applied and queued up for -stable, thanks.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

use-after-free in inet6_destroy_sock Dmitry Vyukov <dvyukov@google.com> - 2015-12-09 15:20 +0100
  Re: use-after-free in inet6_destroy_sock Eric Dumazet <edumazet@google.com> - 2015-12-09 15:50 +0100
    Re: use-after-free in inet6_destroy_sock Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> - 2015-12-09 16:00 +0100
      Re: use-after-free in inet6_destroy_sock Eric Dumazet <edumazet@google.com> - 2015-12-09 16:20 +0100
        [PATCH net] ipv6: sctp: clone options to avoid use after free Eric Dumazet <eric.dumazet@gmail.com> - 2015-12-09 16:30 +0100
          Re: [PATCH net] ipv6: sctp: clone options to avoid use after free Vlad Yasevich <vyasevich@gmail.com> - 2015-12-09 16:40 +0100
          Re: [PATCH net] ipv6: sctp: clone options to avoid use after free Eric Dumazet <eric.dumazet@gmail.com> - 2015-12-09 17:00 +0100
            RE: [PATCH net] ipv6: sctp: clone options to avoid use after free David Laight <David.Laight@ACULAB.COM> - 2015-12-09 17:40 +0100
              Re: [PATCH net] ipv6: sctp: clone options to avoid use after free Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> - 2015-12-09 18:20 +0100
                Re: [PATCH net] ipv6: sctp: clone options to avoid use after free Daniel Borkmann <daniel@iogearbox.net> - 2015-12-09 20:20 +0100
                RE: [PATCH net] ipv6: sctp: clone options to avoid use after free David Laight <David.Laight@ACULAB.COM> - 2015-12-10 13:30 +0100
                Re: [PATCH net] ipv6: sctp: clone options to avoid use after free Eric Dumazet <eric.dumazet@gmail.com> - 2015-12-10 17:00 +0100
                RE: [PATCH net] ipv6: sctp: clone options to avoid use after free David Laight <David.Laight@ACULAB.COM> - 2015-12-10 18:30 +0100
          RE: [PATCH net] ipv6: sctp: clone options to avoid use after free David Laight <David.Laight@ACULAB.COM> - 2015-12-09 17:00 +0100
          Re: [PATCH net] ipv6: sctp: clone options to avoid use after free David Miller <davem@davemloft.net> - 2015-12-12 02:20 +0100

csiph-web