| commit | 2cbee1af2bec3f32a3ea1d33822efc2e937c1fd1 | [log] [tgz] |
|---|---|---|
| author | Mohamed Ghannam <[email protected]> | Sun Dec 10 03:50:58 2017 |
| committer | ChromeOS Commit Bot <[email protected]> | Wed Jan 17 01:40:07 2018 |
| tree | 11b06b3fa43f6a282f4ea1b5b70c39b133f81075 | |
| parent | 6e1618e065fc43c33e6dcbcf764aa5a98ef9411d [diff] |
BACKPORT: net: ipv4: fix for a race condition in raw_sendmsg [ Upstream commit 8f659a03a0ba9289b9aeb9b4470e6fb263d6f483 ] inet->hdrincl is racy, and could lead to uninitialized stack pointer usage, so its value should be read only once. BUG=chromium:798133 TEST=Build and run Change-Id: I961423eee8404786e2c84b8bb4b3354e259bf1af Fixes: c008ba5bdc9f ("ipv4: Avoid reading user iov twice after raw_probe_proto_opt") Signed-off-by: Mohamed Ghannam <[email protected]> Reviewed-by: Eric Dumazet <[email protected]> Signed-off-by: David S. Miller <[email protected]> Signed-off-by: Greg Kroah-Hartman <[email protected]> Conflicts: net/ipv4/raw.c Signed-off-by: Guenter Roeck <[email protected]> (cherry picked from commit be27b620a861) Reviewed-on: https://chromium-review.googlesource.com/860563