Re: [PATCH] net: fix NULL ptr dereference in nl802154_del_llsec_key

From: Alexander Aring
Date: Sun Apr 04 2021 - 20:37:51 EST


Hi,

On Sat, 3 Apr 2021 at 11:18, Pavel Skripkin <paskripkin@xxxxxxxxx> wrote:
>
> syzbot reported NULL ptr dereference in nl802154_del_llsec_key()[1]
> The problem was in case of info->attrs[NL802154_ATTR_SEC_KEY] == NULL.
> nla_parse_nested_deprecated()[2] doesn't check this condition before calling
> nla_len()[3]
>

this is already fixed in the same way just not in net yet.

- Alex