Re: [PATCH nf] netfilter: IDLETIMER: be syzkaller friendly
From: Pablo Neira Ayuso <pablo@netfilter.org> Date: 2018-02-19 17:27:26
On Fri, Feb 16, 2018 at 07:36:28PM -0800, Eric Dumazet wrote:
From: Eric Dumazet <edumazet@google.com>
We had one report from syzkaller [1]
First issue is that INIT_WORK() should be done before mod_timer()
or we risk timer being fired too soon, even with a 1 second timer.
Second issue is that we need to reject too big info->timeout
to avoid overflows in msecs_to_jiffies(info->timeout * 1000), or
risk looping, if result after overflow is 0.