Thread (4 messages) read the whole thread 4 messages, 3 authors, 2025-09-01

Re: [PATCH net 1/1] batman-adv: fix OOB read/write in network-coding decode

From: patchwork-bot+netdevbpf@kernel.org
Date: 2025-09-01 20:40:02
Also in: batman, stable

Hello:

This patch was applied to netdev/net.git (main)
by Simon Wunderlich [off-list ref]:

On Mon,  1 Sep 2025 18:15:46 +0200 you wrote:
From: Stanislav Fort <redacted>

batadv_nc_skb_decode_packet() trusts coded_len and checks only against
skb->len. XOR starts at sizeof(struct batadv_unicast_packet), reducing
payload headroom, and the source skb length is not verified, allowing an
out-of-bounds read and a small out-of-bounds write.

[...]
Here is the summary with links:
  - [net,1/1] batman-adv: fix OOB read/write in network-coding decode
    https://git.kernel.org/netdev/net/c/d77b6ff0ce35

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help