Re: [PATCH] wireless: wext: terminate ifr name coming from userspace

From	David Miller <davem@davemloft.net>
Newsgroups	linux.kernel
Subject	Re: [PATCH] wireless: wext: terminate ifr name coming from userspace
Date	2017-07-19 22:40 +0200
Message-ID	<u53Vg-5jH-31@gated-at.bofh.it> (permalink)
References	<u4sj0-67a-23@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

From: "Levin, Alexander (Sasha Levin)" <alexander.levin@verizon.com>
Date: Tue, 18 Jul 2017 04:23:16 +0000

> ifr name is assumed to be a valid string by the kernel, but nothing
> was forcing username to pass a valid string.
> 
> In turn, this would cause panics as we tried to access the string
> past it's valid memory.
> 
> Signed-off-by: Sasha Levin <alexander.levin@verizon.com>

Applied and queued up for -stable.

dev_ifname() has the same bug, I'll post a patch for that.

Back to linux.kernel | Previous | Next | Find similar | Unroll thread

Thread

Re: [PATCH] wireless: wext: terminate ifr name coming from  userspace David Miller <davem@davemloft.net> - 2017-07-19 22:40 +0200

csiph-web