Received: by 2002:a05:6a10:f3d0:0:0:0:0 with SMTP id a16csp1897902pxv; Sat, 26 Jun 2021 03:45:16 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwyZcLzCegsNqKSKPa8eQeLXlC+D2M5Ps5lOE63eHcnWHgBeSvYMB8PJX7yl/Bv80cjuBLD X-Received: by 2002:a17:906:1c45:: with SMTP id l5mr12380641ejg.392.1624704316439; Sat, 26 Jun 2021 03:45:16 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1624704316; cv=none; d=google.com; s=arc-20160816; b=sFf1N4CK3UXgJKzuPG0O3ZTpPmSewVqAkCANpfrD+fD++0zBMHOOxCbr1OAKF5uqfg EcaRUlOEyMtGPteSQyz6yTKXJ1yrJh78cTU6pPw9Gd9Ed3H0GSX0tb+3wD8ZisHfioeJ kLoUr/okMKxb/R7/KQqLG5h3YIOefO1rEKqJx0zttmY4WogDH91dmu6fvZiizyS8bkme 0zI2WQkRHf7veaGmy0BCH9D2TIwTLRHTmltr0mkBtGS537XMArVdjBB7p8Mwowgr6MK2 wYC/W/kMtoHI6q8aS7s1c37JrOZOdfYlCubFDhZXixmarGuLMhv/r8g9TPkJXFBrSVab JueA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:mime-version:message-id:date:subject:cc:to:from; bh=rDgGJIcAp7einDDiTl6EOkIauKrYd6d0fGRqdm4e8Ak=; b=PEq5Zx9CLFc0YBW/mvORyGHUd7f/X3VkUBmOtwibdrepXbZwc8UniaM1imadCxqcJT kU5r2Kf9qeCMFONi6zhD1JQ68y6dtUNybBrK5b7iE2G0nRI+MN7cTRHnGYKgH/DhMXAn PJZSi8d5z0A3jh9ehqU827t4ijpVKbpkJOMkZOoLSMThMVSwW4mfLCQ8v7Opnj9/IEKT oJsSzmPaWIRr239p/G/k4XTLr06eEZiA4NOEY/3RA9Yxjd50VsJ6acYE4IzGgeFDY/eE GiSM+i+V93x2rVWq9ZGWP6PZ4inMsrf4uSBZtmLw/67g5UBnPeSQvOQsa4l2KLc6Q2T4 po5g== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=huawei.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id h6si8486236ejp.651.2021.06.26.03.44.49; Sat, 26 Jun 2021 03:45:16 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=huawei.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229850AbhFZKoo (ORCPT + 99 others); Sat, 26 Jun 2021 06:44:44 -0400 Received: from szxga01-in.huawei.com ([45.249.212.187]:12031 "EHLO szxga01-in.huawei.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229586AbhFZKoo (ORCPT ); Sat, 26 Jun 2021 06:44:44 -0400 Received: from dggemv703-chm.china.huawei.com (unknown [172.30.72.56]) by szxga01-in.huawei.com (SkyGuard) with ESMTP id 4GBr2q6CbRzZjyt; Sat, 26 Jun 2021 18:39:15 +0800 (CST) Received: from dggema769-chm.china.huawei.com (10.1.198.211) by dggemv703-chm.china.huawei.com (10.3.19.46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Sat, 26 Jun 2021 18:42:19 +0800 Received: from localhost (10.174.179.215) by dggema769-chm.china.huawei.com (10.1.198.211) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Sat, 26 Jun 2021 18:42:18 +0800 From: YueHaibing To: , , , CC: , , , YueHaibing Subject: [PATCH] mac80211: Reject zero MAC address in sta_info_insert_check() Date: Sat, 26 Jun 2021 18:38:56 +0800 Message-ID: <20210626103856.19816-1-yuehaibing@huawei.com> X-Mailer: git-send-email 2.10.2.windows.1 MIME-Version: 1.0 Content-Type: text/plain X-Originating-IP: [10.174.179.215] X-ClientProxiedBy: dggems702-chm.china.huawei.com (10.3.19.179) To dggema769-chm.china.huawei.com (10.1.198.211) X-CFilter-Loop: Reflected Precedence: bulk List-ID: X-Mailing-List: linux-wireless@vger.kernel.org As commit 52dba8d7d5ab ("mac80211: reject zero MAC address in add station") said, we don't consider all-zeroes to be a valid MAC address in most places, so also reject it here. Reported-by: syzbot+ef4ca92d9d6f5ba2f880@syzkaller.appspotmail.com Signed-off-by: YueHaibing --- net/mac80211/sta_info.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/mac80211/sta_info.c b/net/mac80211/sta_info.c index f2fb69da9b6e..3a6887fc9160 100644 --- a/net/mac80211/sta_info.c +++ b/net/mac80211/sta_info.c @@ -547,7 +547,7 @@ static int sta_info_insert_check(struct sta_info *sta) return -ENETDOWN; if (WARN_ON(ether_addr_equal(sta->sta.addr, sdata->vif.addr) || - is_multicast_ether_addr(sta->sta.addr))) + is_valid_ether_addr(sta->sta.addr))) return -EINVAL; /* The RCU read lock is required by rhashtable due to -- 2.17.1