Thread (2 messages) 2 messages, 2 authors, 2021-07-22

Re: [PATCH] 6lowpan: iphc: Fix an off-by-one check of array index

From: Marcel Holtmann <marcel@holtmann.org>
Date: 2021-07-22 14:21:38
Also in: linux-bluetooth, lkml, netdev

Hi Colin,
The bounds check of id is off-by-one and the comparison should
be >= rather >. Currently the WARN_ON_ONCE check does not stop
the out of range indexing of &ldev->ctx.table[id] so also add
a return path if the bounds are out of range.

Addresses-Coverity: ("Illegal address computation").
Fixes: 5609c185f24d ("6lowpan: iphc: add support for stateful compression")
Signed-off-by: Colin Ian King <redacted>
---
net/6lowpan/debugfs.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
patch has been applied to bluetooth-next tree.

Regards

Marcel
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help