Skip to content

Commit cfc64fa

Browse files
committed
tcp_metrics: validate source addr length
[ Upstream commit 66be40e ] I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4 is at least 4 bytes long, and the policy doesn't have an entry for this attribute at all (neither does it for IPv6 but v6 is manually validated). Reviewed-by: Eric Dumazet <edumazet@google.com> Fixes: 3e7013d ("tcp: metrics: Allow selective get/del of tcp-metrics based on src IP") Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org> Signed-off-by: Vlad [C] GEORGESCU <vlaggeor@amazon.com>
1 parent ffe78bb commit cfc64fa

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

net/ipv4/tcp_metrics.c

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -602,6 +602,7 @@ static const struct nla_policy tcp_metrics_nl_policy[TCP_METRICS_ATTR_MAX + 1] =
602602
[TCP_METRICS_ATTR_ADDR_IPV4] = { .type = NLA_U32, },
603603
[TCP_METRICS_ATTR_ADDR_IPV6] = { .type = NLA_BINARY,
604604
.len = sizeof(struct in6_addr), },
605+
[TCP_METRICS_ATTR_SADDR_IPV4] = { .type = NLA_U32, },
605606
/* Following attributes are not received for GET/DEL,
606607
* we keep them for reference
607608
*/

0 commit comments

Comments
 (0)