diff options
| author | Andrea Parri (Microsoft) <parri.andrea@gmail.com> | 2021-01-26 17:29:07 +0100 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2021-01-29 16:44:07 -0800 |
| commit | 0ba35fe91ce34f2d0feff626efd0062dac41781c (patch) | |
| tree | d618cfab0efe234b40342d5d913c60f47a703908 /include/linux/in6.h | |
| parent | 46eb3c108fe1744d0a6abfda69ef8c1d4f0e92d4 (diff) | |
| download | linux-stable-0ba35fe91ce34f2d0feff626efd0062dac41781c.tar.gz linux-stable-0ba35fe91ce34f2d0feff626efd0062dac41781c.tar.bz2 linux-stable-0ba35fe91ce34f2d0feff626efd0062dac41781c.zip | |
hv_netvsc: Copy packets sent by Hyper-V out of the receive buffer
Pointers to receive-buffer packets sent by Hyper-V are used within the
guest VM. Hyper-V can send packets with erroneous values or modify
packet fields after they are processed by the guest. To defend against
these scenarios, copy (sections of) the incoming packet after validating
their length and offset fields in netvsc_filter_receive(). In this way,
the packet can no longer be modified by the host.
Reported-by: Juan Vazquez <juvazq@microsoft.com>
Signed-off-by: Andrea Parri (Microsoft) <parri.andrea@gmail.com>
Link: https://lore.kernel.org/r/20210126162907.21056-1-parri.andrea@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'include/linux/in6.h')
0 files changed, 0 insertions, 0 deletions