Shigeru Yoshida 1ae654c0cd tipc: Return non-zero value from tipc_udp_addr2str() on error ...

[ Upstream commit fa96c6baef1b5385e2f0c0677b32b3839e716076 ]

tipc_udp_addr2str() should return non-zero value if the UDP media
address is invalid. Otherwise, a buffer overflow access can occur in
tipc_media_addr_printf(). Fix this by returning 1 on an invalid UDP
media address.

Fixes: d0f91938bede ("tipc: add ip/udp media type")
Signed-off-by: Shigeru Yoshida <syoshida@redhat.com>
Reviewed-by: Tung Nguyen <tung.q.nguyen@endava.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 7ec3335dd89c8d169e9650e4bac64fde71fdf15b)
Signed-off-by: Vegard Nossum <vegard.nossum@oracle.com>

2024-10-10 10:27:25 +00:00

..

addr.c

…

addr.h

…

bcast.c

…

bcast.h

…

bearer.c

tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()

2024-03-08 08:21:36 +00:00

bearer.h

…

core.c

tipc: fix use-after-free in tipc_bcast_get_mode

2020-11-10 10:29:02 +01:00

core.h

…

discover.c

…

discover.h

…

eth_media.c

…

ib_media.c

…

Kconfig

…

link.c

tipc: Fix potential OOB in tipc_link_proto_rcv()

2022-12-14 11:26:15 +01:00

link.h

…

Makefile

…

monitor.c

tipc: fix shift wrapping bug in map_get()

2022-09-15 12:23:52 +02:00

monitor.h

…

msg.c

tipc: fix UAF in error path

2024-06-03 12:47:30 +00:00

msg.h

…

name_distr.c

tipc: rate limit warning for received illegal binding update

2022-02-16 12:44:51 +01:00

name_distr.h

…

name_table.c

…

name_table.h

…

net.c

…

net.h

…

netlink_compat.c

tipc: Fix kernel-infoleak due to uninitialized TLV value

2024-05-06 14:36:32 +00:00

netlink.c

tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING

2023-11-20 10:27:35 +01:00

netlink.h

…

node.c

tipc: tipc clang warning

2020-01-27 14:46:27 +01:00

node.h

…

server.c

…

server.h

…

socket.c

tipc: improve function tipc_wait_for_cond()

2023-03-17 08:30:38 +01:00

socket.h

…

subscr.c

…

subscr.h

…

sysctl.c

tipc: set sysctl_tipc_rmem and named_timeout right range

2020-01-27 14:46:29 +01:00

udp_media.c

tipc: Return non-zero value from tipc_udp_addr2str() on error

2024-10-10 10:27:25 +00:00

udp_media.h

…