Willem de Bruijn d5be7f632b net: validate untrusted gso packets without csum offload ... Syzkaller again found a path to a kernel crash through bad gso input. By building an excessively large packet to cause an skb field to wrap. If VIRTIO_NET_HDR_F_NEEDS_CSUM was set this would have been dropped in skb_partial_csum_set. GSO packets that do not set checksum offload are suspicious and rare. Most callers of virtio_net_hdr_to_skb already pass them to skb_probe_transport_header. Move that test forward, change it to detect parse failure and drop packets on failure as those cleary are not one of the legitimate VIRTIO_NET_HDR_GSO types. Fixes: bfd5f4a3d6 ("packet: Add GSO/csum offload support.") Fixes: f43798c276 ("tun: Allow GSO using virtio_net_hdr") Reported-by: syzbot <syzkaller@googlegroups.com> Signed-off-by: Willem de Bruijn <willemb@google.com> Reviewed-by: Eric Dumazet <edumazet@google.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2019-02-15 20:30:37 -08:00
..
acpi	Merge branch 'x86-cleanups-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-12-26 17:03:51 -08:00
asm-generic	Rename include/{uapi => }/asm-generic/shmparam.h really	2019-02-12 16:33:18 -08:00
clocksource
crypto	crypto: skcipher - remove remnants of internal IV generators	2018-12-23 11:52:45 +08:00
drm	Merge tag 'drm-intel-fixes-2019-01-11' of git://anongit.freedesktop.org/drm/drm-intel into drm-fixes	2019-01-11 10:26:21 +01:00
dt-bindings	ARM: SoC fixes for linux-5.0	2019-02-08 16:23:41 -08:00
keys
kvm	KVM: arm/arm64: Remove arch timer workqueue	2018-12-19 17:47:07 +00:00
linux	net: validate untrusted gso packets without csum offload	2019-02-15 20:30:37 -08:00
math-emu
media	media fixes for v4.20-rc8	2018-12-25 13:11:30 -08:00
memory
misc
net	net: fix possible overflow in __sk_mem_raise_allocated()	2019-02-13 21:05:18 -08:00
pcmcia
ras
rdma	RDMA/device: Expose ib_device_try_get(()	2019-01-21 14:33:08 -07:00
scsi	4.21 merge window pull request	2018-12-28 14:57:10 -08:00
soc	ARM: SoC driver updates	2018-12-31 17:32:35 -08:00
sound	ALSA: compress: Fix stop handling on compressed capture streams	2019-02-05 22:01:41 +01:00
target
trace	afs: Fix race in async call refcounting	2019-01-17 15:17:28 +00:00
uapi	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-02-15 08:00:11 -08:00
video	drm/exynos: fimd: Make pixel blend mode configurable	2018-12-14 15:46:15 +09:00
xen	arm64/xen: fix xen-swiotlb cache flushing	2019-01-23 22:14:56 +01:00