Oliver Hartkopp f8e0edeaa0 can: j1939: j1939_send_one(): fix missing CAN header initialization ... commit 3eb3d283e8 upstream. The read access to struct canxl_frame::len inside of a j1939 created skbuff revealed a missing initialization of reserved and later filled elements in struct can_frame. This patch initializes the 8 byte CAN header with zero. Fixes: 9d71dd0c70 ("can: add support of SAE J1939 protocol") Cc: Oleksij Rempel <o.rempel@pengutronix.de> Link: https://lore.kernel.org/linux-can/20221104052235.GA6474@pengutronix.de Reported-by: syzbot+d168ec0caca4697e03b1@syzkaller.appspotmail.com Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net> Link: https://lore.kernel.org/all/20221104075000.105414-1-socketcan@hartkopp.net Cc: stable@vger.kernel.org Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-11-16 09:57:17 +01:00
..
j1939	can: j1939: j1939_send_one(): fix missing CAN header initialization	2022-11-16 09:57:17 +01:00
af_can.c	can: af_can: fix NULL pointer dereference in can_rx_register()	2022-11-16 09:57:11 +01:00
af_can.h
bcm.c	can: bcm: check the result of can_send() in bcm_can_tx()	2022-10-26 13:25:47 +02:00
gw.c	can: gw: synchronize rcu operations before removing gw job entry	2021-07-14 16:55:41 +02:00
isotp.c	can: isotp: remove re-binding of bound socket	2022-05-12 12:25:35 +02:00
Kconfig
Makefile
proc.c	net: introduce CAN specific pointer in the struct net_device	2021-04-07 15:00:07 +02:00
raw.c	can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF	2021-08-04 12:46:40 +02:00