Re: [PATCH net] tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()

From: patchwork-bot+netdevbpf
Date: Tue Feb 06 2024 - 03:50:38 EST


Hello:

This patch was applied to netdev/net.git (main)
by Paolo Abeni <pabeni@xxxxxxxxxx>:

On Thu, 1 Feb 2024 00:23:09 +0900 you wrote:
> syzbot reported the following general protection fault [1]:
>
> general protection fault, probably for non-canonical address 0xdffffc0000000010: 0000 [#1] PREEMPT SMP KASAN
> KASAN: null-ptr-deref in range [0x0000000000000080-0x0000000000000087]
> ...
> RIP: 0010:tipc_udp_is_known_peer+0x9c/0x250 net/tipc/udp_media.c:291
> ...
> Call Trace:
> <TASK>
> tipc_udp_nl_bearer_add+0x212/0x2f0 net/tipc/udp_media.c:646
> tipc_nl_bearer_add+0x21e/0x360 net/tipc/bearer.c:1089
> genl_family_rcv_msg_doit+0x1fc/0x2e0 net/netlink/genetlink.c:972
> genl_family_rcv_msg net/netlink/genetlink.c:1052 [inline]
> genl_rcv_msg+0x561/0x800 net/netlink/genetlink.c:1067
> netlink_rcv_skb+0x16b/0x440 net/netlink/af_netlink.c:2544
> genl_rcv+0x28/0x40 net/netlink/genetlink.c:1076
> netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]
> netlink_unicast+0x53b/0x810 net/netlink/af_netlink.c:1367
> netlink_sendmsg+0x8b7/0xd70 net/netlink/af_netlink.c:1909
> sock_sendmsg_nosec net/socket.c:730 [inline]
> __sock_sendmsg+0xd5/0x180 net/socket.c:745
> ____sys_sendmsg+0x6ac/0x940 net/socket.c:2584
> ___sys_sendmsg+0x135/0x1d0 net/socket.c:2638
> __sys_sendmsg+0x117/0x1e0 net/socket.c:2667
> do_syscall_x64 arch/x86/entry/common.c:52 [inline]
> do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83
> entry_SYSCALL_64_after_hwframe+0x63/0x6b
>
> [...]

Here is the summary with links:
- [net] tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
https://git.kernel.org/netdev/net/c/3871aa01e1a7

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html