Pavel Skripkin ab610ee1d1 net: xfrm: fix shift-out-of-bounce ...

[ Upstream commit 5d8dbb7fb82b8661c16d496644b931c0e2e3a12e ]

We need to check up->dirmask to avoid shift-out-of-bounce bug,
since up->dirmask comes from userspace.

Also, added XFRM_USERPOLICY_DIRMASK_MAX constant to uapi to inform
user-space that up->dirmask has maximum possible value

Fixes: 2d151d39073a ("xfrm: Add possibility to set the default to block if we have no policy")
Reported-and-tested-by: syzbot+9cd5837a045bbee5b810@syzkaller.appspotmail.com
Signed-off-by: Pavel Skripkin <paskripkin@gmail.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-05-25 09:17:57 +02:00

..

espintcp.c

espintcp: restore IP CB before handing the packet to xfrm

2020-08-17 15:58:04 +02:00

Kconfig

xfrm/compat: Add 32=>64-bit messages translator

2020-09-24 08:53:03 +02:00

Makefile

xfrm: Provide API to register translator module

2020-09-24 08:53:03 +02:00

xfrm_algo.c

crypto: skcipher - remove the "blkcipher" algorithm type

2019-11-01 13:38:32 +08:00

xfrm_compat.c

xfrm: rate limit SA mapping change message to user space

2022-01-27 10:54:18 +01:00

xfrm_device.c

xfrm: enforce validity of offload input flags

2022-03-08 19:09:32 +01:00

xfrm_hash.c

mm: remove include/linux/bootmem.h

2018-10-31 08:54:16 -07:00

xfrm_hash.h

xfrm: use complete IPv6 addresses for hash

2018-10-15 10:09:18 +02:00

xfrm_inout.h

xfrm: move xfrm4_extract_header to common helper

2020-05-06 09:40:08 +02:00

xfrm_input.c

xfrm: Fix oops in xfrm_replay_advance_bmp

2021-02-03 23:28:45 +01:00

xfrm_interface.c

xfrm: fix tunnel model fragmentation behavior

2022-04-08 14:39:47 +02:00

xfrm_ipcomp.c

net: xfrm: Fix end of loop tests for list_for_each_entry

2021-08-26 08:35:35 -04:00

xfrm_output.c

xfrm: remove the fragment check for ipv6 beet mode

2021-07-14 16:56:19 +02:00

xfrm_policy.c

xfrm: Add possibility to set the default to block if we have no policy

2022-05-25 09:17:57 +02:00

xfrm_proc.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

xfrm_replay.c

xfrm: introduce oseq-may-wrap flag

2020-06-24 07:51:01 +02:00

xfrm_state.c

xfrm: Fix xfrm migrate issues when address family changes

2022-03-19 13:44:43 +01:00

xfrm_sysctl.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm_user.c

net: xfrm: fix shift-out-of-bounce

2022-05-25 09:17:57 +02:00