mirror of
https://github.com/torvalds/linux.git
synced 2024-12-02 17:11:33 +00:00
22dad713b8
The set uadt functions assume lineno is never NULL, but it is in
case of ip_set_utest().
syzkaller managed to generate a netlink message that calls this with
LINENO attr present:
general protection fault: 0000 [#1] PREEMPT SMP KASAN
RIP: 0010:hash_mac4_uadt+0x1bc/0x470 net/netfilter/ipset/ip_set_hash_mac.c:104
Call Trace:
ip_set_utest+0x55b/0x890 net/netfilter/ipset/ip_set_core.c:1867
nfnetlink_rcv_msg+0xcf2/0xfb0 net/netfilter/nfnetlink.c:229
netlink_rcv_skb+0x177/0x450 net/netlink/af_netlink.c:2477
nfnetlink_rcv+0x1ba/0x460 net/netfilter/nfnetlink.c:563
pass a dummy lineno storage, its easier than patching all set
implementations.
This seems to be a day-0 bug.
Cc: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Reported-by: syzbot+34bd2369d38707f3f4a7@syzkaller.appspotmail.com
Fixes:
|
||
|---|---|---|
| .. | ||
| ip_set_bitmap_gen.h | ||
| ip_set_bitmap_ip.c | ||
| ip_set_bitmap_ipmac.c | ||
| ip_set_bitmap_port.c | ||
| ip_set_core.c | ||
| ip_set_getport.c | ||
| ip_set_hash_gen.h | ||
| ip_set_hash_ip.c | ||
| ip_set_hash_ipmac.c | ||
| ip_set_hash_ipmark.c | ||
| ip_set_hash_ipport.c | ||
| ip_set_hash_ipportip.c | ||
| ip_set_hash_ipportnet.c | ||
| ip_set_hash_mac.c | ||
| ip_set_hash_net.c | ||
| ip_set_hash_netiface.c | ||
| ip_set_hash_netnet.c | ||
| ip_set_hash_netport.c | ||
| ip_set_hash_netportnet.c | ||
| ip_set_list_set.c | ||
| Kconfig | ||
| Makefile | ||
| pfxlen.c | ||