Re: [PATCH nf] netfilter/osf: avoid OOB read

From: Florian Westphal
Date: Wed Aug 30 2023 - 19:00:00 EST

Next message: Kees Cook: "Re: [PATCH 1/2] ocfs2: Replace module_param_call with module_param_cb"
Previous message: Michał Mirosław: "[PATCH 3/9] regulator/core: of_get_child_regulator: remove goto"
In reply to: Wander Lairson Costa: "[PATCH nf] netfilter/osf: avoid OOB read"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Wander Lairson Costa <wander@xxxxxxxxxx> wrote:
> The opt_num field is controlled by user mode and is not currently
> validated inside the kernel. An attacker can take advantage of this to
> trigger an OOB read and potentially leak information.

[..]

Can you send a v2 that rejects bogus nf_osf_user_finger structs?

nfnl_osf_add_callback() seems to be the right place to refuse it.

Next message: Kees Cook: "Re: [PATCH 1/2] ocfs2: Replace module_param_call with module_param_cb"
Previous message: Michał Mirosław: "[PATCH 3/9] regulator/core: of_get_child_regulator: remove goto"
In reply to: Wander Lairson Costa: "[PATCH nf] netfilter/osf: avoid OOB read"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]