android_kernel_motorola_sm6375/net/sctp
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Alexey Simakov 61cda2777b sctp: avoid NULL dereference when chunk data buffer is missing
[ Upstream commit 441f0647f7673e0e64d4910ef61a5fb8f16bfb82 ]

chunk->skb pointer is dereferenced in the if-block where it's supposed
to be NULL only.

chunk->skb can only be NULL if chunk->head_skb is not. Check for frag_list
instead and do it just before replacing chunk->skb. We're sure that
otherwise chunk->skb is non-NULL because of outer if() condition.

Fixes: 90017accff ("sctp: Add GSO support")
Signed-off-by: Alexey Simakov <bigalex934@gmail.com>
Acked-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Link: https://patch.msgid.link/20251021130034.6333-1-bigalex934@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-10-29 13:59:59 +01:00
..
associola.c net/sctp: Prevent autoclose integer overflow in sctp_association_init() 2025-01-09 13:23:37 +01:00
auth.c sctp: handle the error returned from sctp_auth_asoc_init_active_key 2022-10-26 13:22:26 +02:00
bind_addr.c sctp: fail if no bound addresses can be used for a given scope 2023-02-06 07:52:46 +01:00
chunk.c
debug.c
diag.c net: annotate lockless accesses to sk->sk_max_ack_backlog 2024-11-08 16:20:46 +01:00
endpointola.c
input.c sctp: linearize cloned gso packets in sctp_rcv 2025-08-28 16:21:24 +02:00
inqueue.c sctp: avoid NULL dereference when chunk data buffer is missing 2025-10-29 13:59:59 +01:00
ipv6.c sctp: initialize more fields in sctp_v6_from_sk() 2025-09-04 14:05:55 +02:00
Kconfig
Makefile
objcnt.c
offload.c
output.c
outqueue.c
primitive.c
proc.c sctp: move hlist_node and hashent out of sctp_ep_common 2024-08-19 05:33:46 +02:00
protocol.c ip: Fix data-races around sysctl_ip_nonlocal_bind. 2022-07-29 17:14:11 +02:00
sm_make_chunk.c sctp: Fix MAC comparison to be constant-time 2025-10-29 13:59:53 +01:00
sm_sideeffect.c sctp: handle invalid error codes without calling BUG() 2023-09-23 10:59:39 +02:00
sm_statefuns.c sctp: Fix MAC comparison to be constant-time 2025-10-29 13:59:53 +01:00
sm_statetable.c
socket.c sctp: Do not wake readers in __sctp_write_space() 2025-06-27 11:02:54 +01:00
stream.c sctp: Fix undefined behavior in left shift operation 2025-04-10 14:29:36 +02:00
stream_interleave.c sctp: fix a potential overflow in sctp_ifwdtsn_skip 2023-04-20 12:07:36 +02:00
stream_sched.c sctp: fix memory leak in sctp_stream_outq_migrate() 2022-12-08 11:23:03 +01:00
stream_sched_prio.c sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop 2023-03-11 16:44:11 +01:00
stream_sched_rr.c sctp: fix memory leak in sctp_stream_outq_migrate() 2022-12-08 11:23:03 +01:00
sysctl.c sctp: sysctl: auth_enable: avoid using current->nsproxy 2025-04-10 14:29:35 +02:00
transport.c sctp: detect and prevent references to a freed transport in sendmsg 2025-05-02 07:39:16 +02:00
tsnmap.c
ulpevent.c
ulpqueue.c