Alexey Simakov
61cda2777b
sctp: avoid NULL dereference when chunk data buffer is missing
...
[ Upstream commit 441f0647f7673e0e64d4910ef61a5fb8f16bfb82 ]
chunk->skb pointer is dereferenced in the if-block where it's supposed
to be NULL only.
chunk->skb can only be NULL if chunk->head_skb is not. Check for frag_list
instead and do it just before replacing chunk->skb. We're sure that
otherwise chunk->skb is non-NULL because of outer if() condition.
Fixes: 90017accff ("sctp: Add GSO support")
Signed-off-by: Alexey Simakov <bigalex934@gmail.com>
Acked-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Link: https://patch.msgid.link/20251021130034.6333-1-bigalex934@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-10-29 13:59:59 +01:00
..
associola.c
net/sctp: Prevent autoclose integer overflow in sctp_association_init()
2025-01-09 13:23:37 +01:00
auth.c
sctp: handle the error returned from sctp_auth_asoc_init_active_key
2022-10-26 13:22:26 +02:00
bind_addr.c
sctp: fail if no bound addresses can be used for a given scope
2023-02-06 07:52:46 +01:00
chunk.c
debug.c
diag.c
net: annotate lockless accesses to sk->sk_max_ack_backlog
2024-11-08 16:20:46 +01:00
endpointola.c
input.c
sctp: linearize cloned gso packets in sctp_rcv
2025-08-28 16:21:24 +02:00
inqueue.c
sctp: avoid NULL dereference when chunk data buffer is missing
2025-10-29 13:59:59 +01:00
ipv6.c
sctp: initialize more fields in sctp_v6_from_sk()
2025-09-04 14:05:55 +02:00
Kconfig
Makefile
objcnt.c
offload.c
output.c
outqueue.c
primitive.c
proc.c
sctp: move hlist_node and hashent out of sctp_ep_common
2024-08-19 05:33:46 +02:00
protocol.c
ip: Fix data-races around sysctl_ip_nonlocal_bind.
2022-07-29 17:14:11 +02:00
sm_make_chunk.c
sctp: Fix MAC comparison to be constant-time
2025-10-29 13:59:53 +01:00
sm_sideeffect.c
sctp: handle invalid error codes without calling BUG()
2023-09-23 10:59:39 +02:00
sm_statefuns.c
sctp: Fix MAC comparison to be constant-time
2025-10-29 13:59:53 +01:00
sm_statetable.c
socket.c
sctp: Do not wake readers in __sctp_write_space()
2025-06-27 11:02:54 +01:00
stream.c
sctp: Fix undefined behavior in left shift operation
2025-04-10 14:29:36 +02:00
stream_interleave.c
sctp: fix a potential overflow in sctp_ifwdtsn_skip
2023-04-20 12:07:36 +02:00
stream_sched.c
sctp: fix memory leak in sctp_stream_outq_migrate()
2022-12-08 11:23:03 +01:00
stream_sched_prio.c
sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
2023-03-11 16:44:11 +01:00
stream_sched_rr.c
sctp: fix memory leak in sctp_stream_outq_migrate()
2022-12-08 11:23:03 +01:00
sysctl.c
sctp: sysctl: auth_enable: avoid using current->nsproxy
2025-04-10 14:29:35 +02:00
transport.c
sctp: detect and prevent references to a freed transport in sendmsg
2025-05-02 07:39:16 +02:00
tsnmap.c
ulpevent.c
ulpqueue.c