Received: by 2002:ac0:a5b6:0:0:0:0:0 with SMTP id m51-v6csp5170502imm; Tue, 19 Jun 2018 06:17:32 -0700 (PDT) X-Google-Smtp-Source: ADUXVKKUFg2zRpfsUOKmDnk47MXvQCGmeLlp0sY45A4ojeK3l0ZBdjNQT5gyYSwRlm4jr4esFaf/ X-Received: by 2002:a17:902:5597:: with SMTP id g23-v6mr18396027pli.99.1529414252881; Tue, 19 Jun 2018 06:17:32 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1529414252; cv=none; d=google.com; s=arc-20160816; b=bIAb6FtGQm94BFIExEPMubaOmNzYoPklaLvLgmN/DS3mdKAlH5yFFzpt9hI/DhJmhg KMsOgTraxz5tCof92rQAtf6SFyXozlrUtlYTX0e9lXxGRbNiyET5CqpDGbCaCXQduQHj Xfa/aJXeNA/2LQr+QE7far6LBR54e2f2ZdVP8JQQRBzd3mAPRFntUdd1gTPU2XHCjTGE dl1rKpn125+gNjQ1r0BQ4efM7MDgaNjV0pLOjvlskpxr1zzumNaLHqBjFEyO90ZgTAnS pKHElfnBnYj+j/ISHAG6N0REWpJY0L9Jikl91nJhQaFF4VEFV73YAcvwyk5vRr5Z4WPA wUTw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :organization:references:in-reply-to:date:cc:to:from:subject :message-id:arc-authentication-results; bh=xJB0/Rub76wVsEmXcAI5RnQLJgKRl+WPPVRULORJe68=; b=i8fo1+NhUWzUfk/FOopHCZhXprYYkKOqnM4mMqQ7qMf4TKtZ7JF4J2o4tW51pa9G20 oDlW/vL6ZJHaH94IowizXRbs4rp7OZt6TD2epSS6Aplo8nCaUTvWFQiYo4Ei9757bGM3 2Jp2SCHQuNTPXx2AWrqrL65g4bv+WlayXy2L86DZoAJF4XiOh01iI/O9++TYYmab5Pnf iei7aSXpQLHmZqdSLio10CBY9xQTWiGIi4Qot4P5kkr37J5TglAlXgoIP12xym717dIY lwiJzX8aVBKXdMzivN70rVsKVMcb3P4PUQJ2RVwvD/L60aSqpVP2uKbzEpFFCfth2AjK 80oA== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=codethink.co.uk Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id d89-v6si16402945pfj.311.2018.06.19.06.17.00; Tue, 19 Jun 2018 06:17:32 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=codethink.co.uk Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757342AbeFSNPg (ORCPT + 99 others); Tue, 19 Jun 2018 09:15:36 -0400 Received: from imap1.codethink.co.uk ([176.9.8.82]:54974 "EHLO imap1.codethink.co.uk" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1756893AbeFSNPe (ORCPT ); Tue, 19 Jun 2018 09:15:34 -0400 Received: from shadbolt.e.decadent.org.uk ([88.96.1.126] helo=xylophone) by imap1.codethink.co.uk with esmtpsa (Exim 4.84_2 #1 (Debian)) id 1fVGTr-0000gW-BQ; Tue, 19 Jun 2018 14:15:31 +0100 Message-ID: <1529414130.2289.295.camel@codethink.co.uk> Subject: Re: [PATCH 4.4 24/24] net: metrics: add proper netlink validation From: Ben Hutchings To: Greg Kroah-Hartman , linux-kernel@vger.kernel.org Cc: stable@vger.kernel.org, Eric Dumazet , syzbot , David Ahern , "David S. Miller" Date: Tue, 19 Jun 2018 14:15:30 +0100 In-Reply-To: <20180612164817.877152473@linuxfoundation.org> References: <20180612164816.587001852@linuxfoundation.org> <20180612164817.877152473@linuxfoundation.org> Organization: Codethink Ltd. Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.22.6-1+deb9u1 Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, 2018-06-12 at 18:52 +0200, Greg Kroah-Hartman wrote: > 4.4-stable review patch.  If anyone has any objections, please let me know. > > ------------------ > > From: Eric Dumazet > > [ Upstream commit 5b5e7a0de2bbf2a1afcd9f49e940010e9fb80d53 ] [...] > --- a/net/ipv4/fib_semantics.c > +++ b/net/ipv4/fib_semantics.c > @@ -979,6 +979,8 @@ fib_convert_metrics(struct fib_info *fi, >   if (val == TCP_CA_UNSPEC) >   return -EINVAL; >   } else { > + if (nla_len(nla) != sizeof(u32)) > + return false; For 4.4 and 4.9, the return value on error needs to be -EINVAL. Ben. >   val = nla_get_u32(nla); >   } >   if (type == RTAX_ADVMSS && val > 65535 - 40) -- Ben Hutchings, Software Developer   Codethink Ltd https://www.codethink.co.uk/ Dale House, 35 Dale Street Manchester, M1 2HF, United Kingdom