]> sourceware.org Git - glibc.git/commit - NEWS
Terminate process on invalid netlink response from kernel [BZ #12926]
authorFlorian Weimer <fweimer@redhat.com>
Mon, 9 Nov 2015 11:48:41 +0000 (12:48 +0100)
committerFlorian Weimer <fweimer@redhat.com>
Mon, 9 Nov 2015 11:48:41 +0000 (12:48 +0100)
commit2eecc8afd02d8c65cf098cbae4de87f332dc21bd
treea36cb50020b3836a379e515af5d1874d8d8ea92f
parentf3d18efb8a720121066dc3401e822043beb98cde
Terminate process on invalid netlink response from kernel [BZ #12926]

The recvmsg system calls for netlink sockets have been particularly
prone to picking up unrelated data after a file descriptor race
(where the descriptor is closed and reopened concurrently in a
multi-threaded process, as the result of a file descriptor
management issue elsewhere).  This commit adds additional error
checking and aborts the process if a datagram of unexpected length
(without the netlink header) is received, or an error code which
cannot happen due to the way the netlink socket is used.

[BZ #12926]
Terminate process on invalid netlink response.
* sysdeps/unix/sysv/linux/netlinkaccess.h
(__netlink_assert_response): Declare.
* sysdeps/unix/sysv/linux/netlink_assert_response.c: New file.
* sysdeps/unix/sysv/linux/Makefile [$(subdir) == inet]
(sysdep_routines): Add netlink_assert_response.
* sysdeps/unix/sysv/linux/check_native.c (__check_native): Call
__netlink_assert_response.
* sysdeps/unix/sysv/linux/check_pf.c (make_request): Likewise.
* sysdeps/unix/sysv/linux/ifaddrs.c (__netlink_request): Likewise.
* sysdeps/unix/sysv/linux/Versions (GLIBC_PRIVATE): Add
__netlink_assert_response.
ChangeLog
NEWS
sysdeps/unix/sysv/linux/Makefile
sysdeps/unix/sysv/linux/Versions
sysdeps/unix/sysv/linux/check_native.c
sysdeps/unix/sysv/linux/check_pf.c
sysdeps/unix/sysv/linux/ifaddrs.c
sysdeps/unix/sysv/linux/netlink_assert_response.c [new file with mode: 0644]
sysdeps/unix/sysv/linux/netlinkaccess.h
This page took 0.04192 seconds and 5 git commands to generate.