Messages in this thread | | | Date | Wed, 31 Aug 2022 20:20:17 -0700 | From | Jakub Kicinski <> | Subject | Re: [PATCH 2/2] netlink: Bounds-check struct nlmsgerr creation |
| |
On Wed, 31 Aug 2022 20:06:10 -0700 Kees Cook wrote: > For 32-bit systems, it might be possible to wrap lnmsgerr content > lengths beyond SIZE_MAX. Explicitly test for all overflows, and mark the > memcpy() as being unable to internally diagnose overflows. > > This also excludes netlink from the coming runtime bounds check on > memcpy(), since it's an unusual case of open-coded sizing and > allocation.
This one you gotta rebase we just rewrote the af_netlink part last week :)
| |