Shigeru Yoshida 7ec3335dd8 tipc: Return non-zero value from tipc_udp_addr2str() on error ...

[ Upstream commit fa96c6baef1b5385e2f0c0677b32b3839e716076 ]

tipc_udp_addr2str() should return non-zero value if the UDP media
address is invalid. Otherwise, a buffer overflow access can occur in
tipc_media_addr_printf(). Fix this by returning 1 on an invalid UDP
media address.

Fixes: d0f91938be ("tipc: add ip/udp media type")
Signed-off-by: Shigeru Yoshida <syoshida@redhat.com>
Reviewed-by: Tung Nguyen <tung.q.nguyen@endava.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-08-19 05:32:07 +02:00

..

addr.c

…

addr.h

…

bcast.c

…

bcast.h

…

bearer.c

tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()

2024-02-23 08:12:54 +01:00

bearer.h

…

core.c

…

core.h

…

diag.c

…

discover.c

…

discover.h

…

eth_media.c

…

group.c

…

group.h

…

ib_media.c

…

Kconfig

…

link.c

…

link.h

…

Makefile

…

monitor.c

…

monitor.h

…

msg.c

tipc: fix UAF in error path

2024-05-17 11:42:43 +02:00

msg.h

…

name_distr.c

…

name_distr.h

…

name_table.c

…

name_table.h

…

net.c

…

net.h

…

netlink_compat.c

tipc: Fix kernel-infoleak due to uninitialized TLV value

2023-11-28 16:46:33 +00:00

netlink.c

tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING

2023-11-20 10:29:21 +01:00

netlink.h

…

node.c

…

node.h

…

socket.c

…

socket.h

…

subscr.c

…

subscr.h

…

sysctl.c

…

topsrv.c

…

topsrv.h

…

udp_media.c

tipc: Return non-zero value from tipc_udp_addr2str() on error

2024-08-19 05:32:07 +02:00

udp_media.h

…