Thread (3 messages) flat view 3 messages, 3 authors, 2016-06-15

Re: [PATCH net-next] tcp: return sizeof tcp_dctcp_info in dctcp_get_info()

From: Daniel Borkmann <daniel@iogearbox.net>
Date: 2016-06-13 15:47:45

On 06/13/2016 05:20 PM, Neal Cardwell wrote:
Make sure that dctcp_get_info() returns only the size of the
info->dctcp struct that it zeroes out and fills in. Previously it had
been returning the size of the enclosing tcp_cc_info union,
sizeof(*info).  There is no problem yet, but that union that may one
day be larger than struct tcp_dctcp_info, in which case the
TCP_CC_INFO code might accidentally copy uninitialized bytes from the
stack.

Signed-off-by: Neal Cardwell <ncardwell@google.com>
Signed-off-by: Soheil Hassas Yeganeh <redacted>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help