Messages in this thread Patch in this message | | | From | Rong Tao <> | Subject | [PATCH bpf-next] samples/bpf: xdp_router_ipv4_user: Fix write overflow | Date | Tue, 22 Nov 2022 10:32:56 +0800 |
| |
From: Rong Tao <rongtao@cestc.cn>
prefix_key->data allocates three bytes using alloca(), but four bytes are accessed in the program.
Signed-off-by: Rong Tao <rongtao@cestc.cn> --- samples/bpf/xdp_router_ipv4_user.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/samples/bpf/xdp_router_ipv4_user.c b/samples/bpf/xdp_router_ipv4_user.c index 683913bbf279..9d41db09c480 100644 --- a/samples/bpf/xdp_router_ipv4_user.c +++ b/samples/bpf/xdp_router_ipv4_user.c @@ -162,7 +162,7 @@ static void read_route(struct nlmsghdr *nh, int nll) __be32 gw; } *prefix_value; - prefix_key = alloca(sizeof(*prefix_key) + 3); + prefix_key = alloca(sizeof(*prefix_key) + 4); prefix_value = alloca(sizeof(*prefix_value)); prefix_key->prefixlen = 32; -- 2.38.1
| |