diff options
| author | David Miller <davem@davemloft.net> | 2014-12-16 17:58:17 -0500 |
|---|---|---|
| committer | Luis Henriques <luis.henriques@canonical.com> | 2015-01-19 11:09:52 +0000 |
| commit | d373e19bf834f5dcd796502dfe93b4992dd36fc2 (patch) | |
| tree | d3385ea4a7925b082454dcf1b7bc44d02f7e0e80 /include/uapi/linux/string.h | |
| parent | 9fc3d4163ffc6085fa885d5e6a7bbd557a97f0e7 (diff) | |
netlink: Always copy on mmap TX.
commit 4682a0358639b29cf69437ed909c6221f8c89847 upstream.
Checking the file f_count and the nlk->mapped count is not completely
sufficient to prevent the mmap'd area contents from changing from
under us during netlink mmap sendmsg() operations.
Be careful to sample the header's length field only once, because this
could change from under us as well.
Fixes: 5fd96123ee19 ("netlink: implement memory mapped sendmsg()")
Signed-off-by: David S. Miller <davem@davemloft.net>
Acked-by: Daniel Borkmann <dborkman@redhat.com>
Acked-by: Thomas Graf <tgraf@suug.ch>
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
Diffstat (limited to 'include/uapi/linux/string.h')
0 files changed, 0 insertions, 0 deletions