diff options
| author | Jakub Kicinski <kuba@kernel.org> | 2025-06-26 16:39:26 -0700 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2025-06-30 08:32:37 -0700 |
| commit | 99e3eb454cc48b9f2691256780aeb247bdc0ee3d (patch) | |
| tree | 0fe35ba2fb1fe767d146e9db0e8f4ecce77e3e1e /net/lapb/lapb_in.c | |
| parent | 7012d4f3c7a82008113974108bf0c9c0553b424a (diff) | |
net: ethtool: avoid OOB accesses in PAUSE_SET
We now reuse .parse_request() from GET on SET, so we need to make sure
that the policies for both cover the attributes used for .parse_request().
genetlink will only allocate space in info->attrs for ARRAY_SIZE(policy).
Reported-by: syzbot+430f9f76633641a62217@syzkaller.appspotmail.com
Fixes: 963781bdfe20 ("net: ethtool: call .parse_request for SET handlers")
Reviewed-by: Ido Schimmel <idosch@nvidia.com>
Tested-by: Ido Schimmel <idosch@nvidia.com>
Link: https://patch.msgid.link/20250626233926.199801-1-kuba@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'net/lapb/lapb_in.c')
0 files changed, 0 insertions, 0 deletions