diff options
| author | Asbjørn Sloth Tønnesen <ast@fiberby.net> | 2025-11-05 18:32:12 +0000 |
|---|---|---|
| committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2025-12-01 03:25:08 +0100 |
| commit | e0e1b6db2e4b8fae44e222c188d3e96259d00c8e (patch) | |
| tree | 28fe620d6898adefc950e5f635f379ac04083654 /drivers/net | |
| parent | 0177f0f07886e54e12c6f18fa58f63e63ddd3c58 (diff) | |
wireguard: netlink: enable strict genetlink validation
WireGuard is a modern enough genetlink family, that it doesn't need
resv_start_op. It already had policies in place when it was first
merged, it has also never used the reserved field, or other things
toggled by resv_start_op.
wireguard-tools have always used zero initialized memory, and have never
touched the reserved field, neither have any other clients I have
checked. Closed-source clients are much more likely to use the
embeddedable library from wireguard-tools, than a DIY implementation
using uninitialized memory.
Signed-off-by: Asbjørn Sloth Tønnesen <ast@fiberby.net>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Diffstat (limited to 'drivers/net')
| -rw-r--r-- | drivers/net/wireguard/netlink.c | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/drivers/net/wireguard/netlink.c b/drivers/net/wireguard/netlink.c index 67f962eb8b46..8adeec6f9440 100644 --- a/drivers/net/wireguard/netlink.c +++ b/drivers/net/wireguard/netlink.c @@ -631,7 +631,6 @@ static const struct genl_ops genl_ops[] = { static struct genl_family genl_family __ro_after_init = { .ops = genl_ops, .n_ops = ARRAY_SIZE(genl_ops), - .resv_start_op = WG_CMD_SET_DEVICE + 1, .name = WG_GENL_NAME, .version = WG_GENL_VERSION, .maxattr = WGDEVICE_A_MAX, |