Messages in this thread | | | Date | Fri, 17 Jul 2020 10:50:13 -0700 | From | Jakub Kicinski <> | Subject | Re: [PATCH] Fix memory overwriting issue when copy an address to user space |
| |
On Fri, 17 Jul 2020 10:31:54 +0000 lebon zhou wrote: > When application provided buffer size less than sockaddr_storage, then > kernel will overwrite some memory area which may cause memory corruption, > e.g.: in recvmsg case, let msg_name=malloc(8) and msg_namelen=8, then > usually application can call recvmsg successful but actually application > memory get corrupted. > > Fix to return EINVAL when application buffer size less than > sockaddr_storage. > > Signed-off-by: lebon.zhou <lebon.zhou@gmail.com>
Please repoist CCing the netdev mailing list.
| |