Nikita Zhandarovich d640627663 net/rose: prevent integer overflows in rose_setsockopt() ...

In case of possible unpredictably large arguments passed to
rose_setsockopt() and multiplied by extra values on top of that,
integer overflows may occur.

Do the safest minimum and fix these issues by checking the
contents of 'opt' and returning -EINVAL if they are too large. Also,
switch to unsigned int and remove useless check for negative 'opt'
in ROSE_IDLE case.

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Signed-off-by: Nikita Zhandarovich <n.zhandarovich@fintech.ru>
Link: https://patch.msgid.link/20250115164220.19954-1-n.zhandarovich@fintech.ru
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

2025-01-20 16:36:33 -08:00

..

af_rose.c

net/rose: prevent integer overflows in rose_setsockopt()

2025-01-20 16:36:33 -08:00

Makefile

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00

rose_dev.c

rose: constify dev_addr passing

2021-10-13 09:40:45 -07:00

rose_in.c

net: Don't include filter.h from net/sock.h

2021-12-29 08:48:14 -08:00

rose_link.c

rose: Fix NULL pointer dereference in rose_send_frame()

2022-11-02 11:57:30 +00:00

rose_loopback.c

rose: check NULL rose_loopback_neigh->loopback

2022-08-22 14:24:54 +01:00

rose_out.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

rose_route.c

net: rose: fix netdev reference changes

2022-08-01 11:59:23 -07:00

rose_subr.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

rose_timer.c

net: rose: fix UAF bugs caused by timer handler

2022-06-30 11:07:30 +02:00

sysctl_net_rose.c

net: Remove ctl_table sentinel elements from several networking subsystems

2024-05-03 13:29:42 +01:00