Jakub Kicinski 8d5806c600 net: shaper: reject handle IDs exceeding internal bit-width ... net_shaper_parse_handle() reads the user-supplied handle ID via nla_get_u32(), accepting the full u32 range. However, the xarray key is built by net_shaper_handle_to_index() using FIELD_PREP(NET_SHAPER_ID_MASK, handle->id), where NET_SHAPER_ID_MASK is GENMASK(25, 0) - only 26 bits wide. FIELD_PREP silently masks off the upper bits at runtime. A user-supplied NODE id like 0x04000123 becomes id 0x123. Additionally, a user-supplied id equal to NET_SHAPER_ID_UNSPEC (0x03FFFFFF, which is NET_SHAPER_ID_MASK itself) would collide with the sentinel used internally by the group operation to signal "allocate a new NODE id". Reject user-supplied IDs >= NET_SHAPER_ID_MASK (i.e., >= 0x03FFFFFF) in the policy. Fixes: 4b623f9f0f ("net-shapers: implement NL get operation") Signed-off-by: Jakub Kicinski <kuba@kernel.org> Link: https://patch.msgid.link/20260510192904.3987113-9-kuba@kernel.org Signed-off-by: Paolo Abeni <pabeni@redhat.com>		2026-05-12 16:15:00 +02:00
..
specs	net: shaper: reject handle IDs exceeding internal bit-width	2026-05-12 16:15:00 +02:00
genetlink-c.yaml	tools: ynl: add scope qualifier for definitions	2026-05-12 16:15:00 +02:00
genetlink-legacy.yaml	tools: ynl: add scope qualifier for definitions	2026-05-12 16:15:00 +02:00
genetlink.yaml	tools: ynl: add scope qualifier for definitions	2026-05-12 16:15:00 +02:00
netlink-raw.yaml	tools: ynl: add scope qualifier for definitions	2026-05-12 16:15:00 +02:00