Re: [PATCH net-next v10 0/5] Avoiding stack overflow in skb_to_sgvec

From	David Miller <davem@davemloft.net>
Newsgroups	linux.kernel
Subject	Re: [PATCH net-next v10 0/5] Avoiding stack overflow in skb_to_sgvec
Date	2017-06-05 05:10 +0200
Message-ID	<tOQyZ-5F6-3@gated-at.bofh.it> (permalink)
References	<tOtj3-6Of-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

From: "Jason A. Donenfeld" <Jason@zx2c4.com>
Date: Sun,  4 Jun 2017 04:16:21 +0200

> Changes v9->v10:
>    - Spaces to tabs on one line.
>    - Added some acked-by, reviewed-by lines.

I wish in the future you would retain the entire change history, and
keep it in it's entirety here in the header postings.  That list of
adjustments is important and might be useful to someone in the future
("why didn't they do this, oh they decided to not do that
intentionally I can see that in the Change list").

> The recent bug with macsec and historical one with virtio have
> indicated that letting skb_to_sgvec trounce all over an sglist
> without checking the length is probably a bad idea. And it's not
> necessary either: an sglist already explicitly marks its last
> item, and the initialization functions are diligent in doing so.
> Thus there's a clear way of avoiding future overflows.
> 
> So, this patchset, from a high level, makes skb_to_sgvec return
> a potential error code, and then adjusts all callers to check
> for the error code. There are two situations in which skb_to_sgvec
> might return such an error:
> 
>    1) When the passed in sglist is too small; and
>    2) When the passed in skbuff is too deeply nested.
> 
> So, the first patch in this series handles the issues with
> skb_to_sgvec directly, and the remaining ones then handle the call
> sites.

Applied to net-next.

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[PATCH net-next v10 0/5] Avoiding stack overflow in skb_to_sgvec "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-06-04 04:20 +0200
  [PATCH net-next v10 3/5] rxrpc: check return value of skb_to_sgvec always "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-06-04 04:20 +0200
  Re: [PATCH net-next v10 0/5] Avoiding stack overflow in  skb_to_sgvec David Miller <davem@davemloft.net> - 2017-06-05 05:10 +0200

csiph-web