Thread (3 messages) 3 messages, 3 authors, 25d ago

Re: [PATCH net] net/packet: avoid truncating TPACKET_V3 private size

flat view

From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-09-17 00:41:12
Also in: lkml

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski [off-list ref]:

On Sun, 13 Sep 2026 10:31:08 +0000 you wrote:
From: Mark Amirkan <redacted>

tpacket_req3.tp_sizeof_priv is an unsigned int, and packet_set_ring()
validates the full value against the block size.  init_prb_bdqc() then
stores it in the unsigned short blk_sizeof_priv field.

Commit 2b6867c2ce76 ("net/packet: fix overflow in check for priv area
size") fixed the validation arithmetic, but an accepted value above
USHRT_MAX still narrows when it is stored.

[...]
Here is the summary with links:
  - [net] net/packet: avoid truncating TPACKET_V3 private size
    https://git.kernel.org/netdev/net/c/37213e611202

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help