Eric Dumazet 69f23a09da rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check ... Jakub forgot to either use nlmsg_len() or nlmsg_msg_size(), allowing KMSAN to detect a possible uninit-value in rtnl_stats_get BUG: KMSAN: uninit-value in rtnl_stats_get+0x6d9/0x11d0 net/core/rtnetlink.c:4997 CPU: 0 PID: 10428 Comm: syz-executor034 Not tainted 5.1.0-rc2+ #24 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x173/0x1d0 lib/dump_stack.c:113 kmsan_report+0x131/0x2a0 mm/kmsan/kmsan.c:619 __msan_warning+0x7a/0xf0 mm/kmsan/kmsan_instr.c:310 rtnl_stats_get+0x6d9/0x11d0 net/core/rtnetlink.c:4997 rtnetlink_rcv_msg+0x115b/0x1550 net/core/rtnetlink.c:5192 netlink_rcv_skb+0x431/0x620 net/netlink/af_netlink.c:2485 rtnetlink_rcv+0x50/0x60 net/core/rtnetlink.c:5210 netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline] netlink_unicast+0xf3e/0x1020 net/netlink/af_netlink.c:1336 netlink_sendmsg+0x127f/0x1300 net/netlink/af_netlink.c:1925 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg net/socket.c:632 [inline] ___sys_sendmsg+0xdb3/0x1220 net/socket.c:2137 __sys_sendmsg net/socket.c:2175 [inline] __do_sys_sendmsg net/socket.c:2184 [inline] __se_sys_sendmsg+0x305/0x460 net/socket.c:2182 __x64_sys_sendmsg+0x4a/0x70 net/socket.c:2182 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:291 entry_SYSCALL_64_after_hwframe+0x63/0xe7 Fixes: 51bc860d4a ("rtnetlink: stats: validate attributes in get as well as dumps") Signed-off-by: Eric Dumazet <edumazet@google.com> Reported-by: syzbot <syzkaller@googlegroups.com> Cc: Jakub Kicinski <jakub.kicinski@netronome.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2019-04-14 14:10:08 -07:00
..
datagram.c	net: datagram: fix unbounded loop in __skb_try_recv_datagram()	2019-03-27 21:58:53 -07:00
dev_addr_lists.c
dev_ioctl.c
dev.c	failover: allow name change on IFF_UP slave interfaces	2019-04-10 22:12:26 -07:00
devlink.c	net: devlink: skip info_get op call if it is not defined in dumpit	2019-03-26 11:25:29 -07:00
drop_monitor.c
dst_cache.c
dst.c
ethtool.c	net: ethtool: not call vzalloc for zero sized memory request	2019-03-29 13:41:55 -07:00
failover.c	failover: allow name change on IFF_UP slave interfaces	2019-04-10 22:12:26 -07:00
fib_notifier.c
fib_rules.c
filter.c	bpf: Check address length before reading address family	2019-04-12 10:25:03 -07:00
flow_dissector.c	flow_dissector: fix clamping of BPF flow_keys for non-zero nhoff	2019-04-03 16:49:48 +02:00
flow_offload.c
gen_estimator.c
gen_stats.c	net: sched: put back q.qlen into a single location	2019-03-02 14:10:18 -08:00
gro_cells.c	gro_cells: make sure device is up in gro_cells_receive()	2019-03-10 11:07:14 -07:00
hwbm.c
link_watch.c
lwt_bpf.c	net: fix GSO in bpf_lwt_push_ip_encap	2019-03-07 10:41:29 +01:00
lwtunnel.c	ip_tunnel: Add dst_cache support in lwtunnel_state of ip tunnel	2019-02-24 22:13:49 -08:00
Makefile
neighbour.c
net_namespace.c	netns: provide pure entropy for net_hash_mix()	2019-03-28 17:00:45 -07:00
net-procfs.c
net-sysfs.c	net-sysfs: Fix memory leak in netdev_register_kobject	2019-03-21 13:38:27 -07:00
net-sysfs.h
net-traces.c
netclassid_cgroup.c
netevent.c
netpoll.c
netprio_cgroup.c
page_pool.c
pktgen.c	mm: replace all open encodings for NUMA_NO_NODE	2019-03-05 21:07:14 -08:00
ptp_classifier.c
request_sock.c
rtnetlink.c	rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check	2019-04-14 14:10:08 -07:00
scm.c
secure_seq.c
skbuff.c	net-gro: Fix GRO flush when receiving a GSO packet.	2019-04-03 21:40:52 -07:00
skmsg.c	bpf: Stop the psock parser before canceling its work	2019-03-07 15:16:20 +01:00
sock_diag.c
sock_map.c
sock_reuseport.c
sock.c	net: support 64bit rates for getsockopt(SO_MAX_PACING_RATE)	2019-03-01 23:08:30 -08:00
stream.c
sysctl_net_core.c
timestamping.c
tso.c
utils.c
xdp.c