Re: [PATCH net] RDS: Check cmsg_len before dereferencing CMSG_DATA

2017-12-27 Thread David Miller
From: Avinash Repaka Date: Thu, 21 Dec 2017 20:17:04 -0800 > RDS currently doesn't check if the length of the control message is > large enough to hold the required data, before dereferencing the control > message data. This results in following crash: ... > To fix

Re: [PATCH net] RDS: Check cmsg_len before dereferencing CMSG_DATA

2017-12-22 Thread Yuval Shaia
On Thu, Dec 21, 2017 at 08:17:04PM -0800, Avinash Repaka wrote: > RDS currently doesn't check if the length of the control message is > large enough to hold the required data, before dereferencing the control > message data. This results in following crash: > > BUG: KASAN: stack-out-of-bounds in

Re: [PATCH net] RDS: Check cmsg_len before dereferencing CMSG_DATA

2017-12-21 Thread santosh.shilim...@oracle.com
On 12/21/17 8:17 PM, Avinash Repaka wrote: RDS currently doesn't check if the length of the control message is large enough to hold the required data, before dereferencing the control message data. This results in following crash: BUG: KASAN: stack-out-of-bounds in rds_rdma_bytes

[PATCH net] RDS: Check cmsg_len before dereferencing CMSG_DATA

2017-12-21 Thread Avinash Repaka
RDS currently doesn't check if the length of the control message is large enough to hold the required data, before dereferencing the control message data. This results in following crash: BUG: KASAN: stack-out-of-bounds in rds_rdma_bytes net/rds/send.c:1013 [inline] BUG: KASAN: