Willem de Bruijn 6dd912f826 net: check untrusted gso_size at kernel entry ...

Syzkaller again found a path to a kernel crash through bad gso input:
a packet with gso size exceeding len.

These packets are dropped in tcp_gso_segment and udp[46]_ufo_fragment.
But they may affect gso size calculations earlier in the path.

Now that we have thlen as of commit 9274124f02 ("net: stricter
validation of untrusted gso packets"), check gso_size at entry too.

Fixes: bfd5f4a3d6 ("packet: Add GSO/csum offload support.")
Reported-by: syzbot <syzkaller@googlegroups.com>
Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2020-05-26 20:23:46 -07:00

..

acpi

Merge tag 'acpi-5.7-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

2020-04-06 10:35:06 -07:00

asm-generic

arch: split MODULE_ARCH_VERMAGIC definitions out to <asm/vermagic.h>

2020-04-23 10:50:26 +09:00

clocksource

pwm: omap-dmtimer: Drop unused header file

2020-03-30 18:03:06 +02:00

crypto

crypto: curve25519 - do not pollute dispatcher based on assembler

2020-04-09 00:01:59 +09:00

drm

drm: fix trivial field description cut-and-paste error

2020-05-11 10:48:53 -07:00

dt-bindings

Merge tag 'riscv-for-linus-5.7' of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux

2020-04-09 10:51:30 -07:00

keys

KEYS: Don't write out to userspace while holding key semaphore

2020-03-29 12:40:41 +01:00

kunit

…

kvm

…

linux

net: check untrusted gso_size at kernel entry

2020-05-26 20:23:46 -07:00

math-emu

…

media

…

misc

…

net

ipv4: nexthop version of fib_info_nh_uses_dev

2020-05-26 16:06:07 -07:00

pcmcia

…

ras

…

rdma

…

scsi

Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

2020-04-02 17:03:53 -07:00

soc

net: dsa: ocelot: the MAC table on Felix is twice as large

2020-05-06 17:15:24 -07:00

sound

ALSA: rawmidi: Fix racy buffer resize under concurrent accesses

2020-05-07 22:29:14 +02:00

target

…

trace

Merge tag 'rxrpc-fixes-20200520' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs

2020-05-22 15:53:30 -07:00

uapi

usb: raw-gadget: support stalling/halting/wedging endpoints

2020-05-14 12:30:18 +03:00

vdso

vdso/datapage: Use correct clock mode name in comment

2020-04-20 19:19:52 +02:00

video

…

xen

xen: Use evtchn_type_t as a type for event channels

2020-04-07 12:12:54 +02:00