Prashant Bhole af066ed3d4 rtnetlink: Fix null-ptr-deref in rtnl_newlink ...

In rtnl_newlink(), NULL check is performed on m_ops however member of
ops is accessed. Fixed by accessing member of m_ops instead of ops.

[  345.432629] BUG: KASAN: null-ptr-deref in rtnl_newlink+0x400/0x1110
[  345.432629] Read of size 4 at addr 0000000000000088 by task ip/986
[  345.432629]
[  345.432629] CPU: 1 PID: 986 Comm: ip Not tainted 4.17.0-rc6+ #9
[  345.432629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014
[  345.432629] Call Trace:
[  345.432629]  dump_stack+0xc6/0x150
[  345.432629]  ? dump_stack_print_info.cold.0+0x1b/0x1b
[  345.432629]  ? kasan_report+0xb4/0x410
[  345.432629]  kasan_report.cold.4+0x8f/0x91
[  345.432629]  ? rtnl_newlink+0x400/0x1110
[  345.432629]  rtnl_newlink+0x400/0x1110
[...]

Fixes: ccf8dbcd062a ("rtnetlink: Remove VLA usage")
Signed-off-by: Prashant Bhole <bhole_prashant_q7@lab.ntt.co.jp>
Tested-by: Ido Schimmel <idosch@mellanox.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2018-06-01 10:39:24 -04:00

..

datagram.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

dev_addr_lists.c

net: change the comment of dev_mc_init

2018-04-19 12:58:20 -04:00

dev_ioctl.c

net: don't unnecessarily load kernel modules in dev_ioctl()

2018-03-07 15:12:58 -05:00

dev.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2018-05-21 16:01:54 -04:00

devlink.c

net: remove unnecessary genlmsg_cancel() calls

2018-05-29 09:53:38 -04:00

drop_monitor.c

treewide: setup_timer() -> timer_setup()

2017-11-21 15:57:07 -08:00

dst_cache.c

net: core: dst_cache_set_ip6: Rename 'addr' parameter to 'saddr' for consistency

2018-03-05 12:52:45 -05:00

dst.c

net/ipv6: move metrics from dst to rt6_info

2018-04-17 23:41:16 -04:00

ethtool.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2018-05-04 09:58:56 -04:00

failover.c

net: Introduce generic failover module

2018-05-28 22:59:54 -04:00

fib_notifier.c

net: Fix fib notifer to return errno

2018-03-29 14:10:30 -04:00

fib_rules.c

net: rules: Move l3mdev attribute validation to a helper

2018-04-25 13:26:12 -04:00

filter.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next

2018-05-24 22:20:51 -04:00

flow_dissector.c

flow_dissector: do not rely on implicit casts

2018-05-08 00:02:41 -04:00

gen_estimator.c

net_sched: gen_estimator: fix broken estimators based on percpu stats

2018-02-23 12:35:46 -05:00

gen_stats.c

net: sched: add support for TCQ_F_NOLOCK subqueues to sch_mq

2017-12-08 13:32:26 -05:00

gro_cells.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

hwbm.c

net: hwbm: Fix unbalanced spinlock in error case

2016-05-25 12:35:09 -07:00

link_watch.c

net: link_watch: mark bonding link events urgent

2018-01-23 19:43:30 -05:00

lwt_bpf.c

bpf: rename bpf_compute_data_end into bpf_compute_data_pointers

2017-09-26 13:36:44 -07:00

lwtunnel.c

ipv6: sr: define core operations for seg6local lightweight tunnel

2017-08-07 14:16:22 -07:00

Makefile

net: Introduce generic failover module

2018-05-28 22:59:54 -04:00

neighbour.c

neighbour: support for NTF_EXT_LEARNED flag

2018-04-25 13:19:59 -04:00

net_namespace.c

net: Do not take net_rwsem in __rtnl_link_unregister()

2018-03-31 22:24:58 -04:00

net-procfs.c

net: Drop pernet_operations::async

2018-03-27 13:18:09 -04:00

net-sysfs.c

net: Use octal not symbolic permissions

2018-03-26 12:07:48 -04:00

net-sysfs.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

net-traces.c

net/ipv6: Udate fib6_table_lookup tracepoint

2018-05-24 23:01:15 -04:00

netclassid_cgroup.c

cgroup: add @flags to css_task_iter_start() and implement CSS_TASK_ITER_PROCS

2017-07-21 11:14:51 -04:00

netevent.c

netevent: remove automatic variable in register_netevent_notifier()

2015-05-31 00:03:21 -07:00

netpoll.c

netpoll: Use lockdep to assert IRQs are disabled/enabled

2017-11-08 11:13:54 +01:00

netprio_cgroup.c

net: remove duplicate includes

2017-12-13 13:18:46 -05:00

page_pool.c

page_pool: refurbish version of page_pool code

2018-04-17 10:50:29 -04:00

pktgen.c

net: Drop pernet_operations::async

2018-03-27 13:18:09 -04:00

ptp_classifier.c

ptp: Change ptp_class to a proper bitmask

2015-11-03 11:08:22 -05:00

request_sock.c

ipv4: Namespaceify tcp_max_syn_backlog knob

2016-12-29 11:38:31 -05:00

rtnetlink.c

rtnetlink: Fix null-ptr-deref in rtnl_newlink

2018-06-01 10:39:24 -04:00

scm.c

sched/headers: Prepare for new header dependencies before moving code to <linux/sched/user.h>

2017-03-02 08:42:29 +01:00

secure_seq.c

tcp: Namespaceify sysctl_tcp_timestamps

2017-06-08 10:53:29 -04:00

skbuff.c

net: Rename and export copy_skb_header

2018-05-01 09:42:46 -04:00

sock_diag.c

net: Drop pernet_operations::async

2018-03-27 13:18:09 -04:00

sock_reuseport.c

soreuseport: fix mem leak in reuseport_add_sock()

2018-02-02 19:47:03 -05:00

sock.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2018-05-21 16:01:54 -04:00

stream.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

sysctl_net_core.c

headers: untangle kmemleak.h from mm.h

2018-04-05 21:36:27 -07:00

timestamping.c

net: skb_defer_rx_timestamp should check for phydev before setting up classify

2015-07-09 14:17:15 -07:00

tso.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

utils.c

net/utils: Introduce inet_addr_is_any

2018-03-26 08:53:43 -06:00

xdp.c

xdp: introduce xdp_return_frame_rx_napi

2018-05-24 18:36:15 -07:00