Re: [PATCH net] sctp: validate chunk len before actually using it

2016-10-29 Thread David Miller
From: Marcelo Ricardo Leitner Date: Tue, 25 Oct 2016 14:27:39 -0200 > Andrey Konovalov reported that KASAN detected that SCTP was using a slab > beyond the boundaries. It was caused because when handling out of the > blue packets in function sctp_sf_ootb() it was checking the chunk len > only aft

Re: [PATCH net] sctp: validate chunk len before actually using it

2016-10-26 Thread Neil Horman
On Tue, Oct 25, 2016 at 02:27:39PM -0200, Marcelo Ricardo Leitner wrote: > Andrey Konovalov reported that KASAN detected that SCTP was using a slab > beyond the boundaries. It was caused because when handling out of the > blue packets in function sctp_sf_ootb() it was checking the chunk len > only

Re: [PATCH net] sctp: validate chunk len before actually using it

2016-10-25 Thread Xin Long
On Wed, Oct 26, 2016 at 12:27 AM, Marcelo Ricardo Leitner wrote: > Andrey Konovalov reported that KASAN detected that SCTP was using a slab > beyond the boundaries. It was caused because when handling out of the > blue packets in function sctp_sf_ootb() it was checking the chunk len > only after a

[PATCH net] sctp: validate chunk len before actually using it

2016-10-25 Thread Marcelo Ricardo Leitner
Andrey Konovalov reported that KASAN detected that SCTP was using a slab beyond the boundaries. It was caused because when handling out of the blue packets in function sctp_sf_ootb() it was checking the chunk len only after already processing the first chunk, validating only for the 2nd and subsequ