net: tls: net: tls: fix a few random bugs
Get series with b4
b4 am [email protected]Versions newest first · linked by author and title
Changes in v2 from the cover letter
- patches 2 and 3 are new (Sashiko report)
- patch 4 is rewritten to remove the code instead of fixing it
- drop the selftests, they were a little too specific, more PoC triggers than selftests, and Sashiko kept nit picking
- old patches 1 and 2 were already applied
- old patch 3 is gone since it can't trigger today (I will send it to net-next)
v1: https://lore.kernel.org/[email protected]
Patches in v2 2 of 4 applied
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/4 | net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ringnet/ | +2 | 1 reply | Applied |
| 2/4 | net: tls: prevent chain-after-chain in plain text SGnet/ | +18 | 4 replies | Applied |
| 3/4 | net: tls: fix use-after-free in tls_sw_sendmsg_locked after bpf verdictnet/ | +0 | 2 replies | |
| 4/4 | net: tls: remove bad rollback and UAF on ENOSPCnet/ | +2 | 5 replies |
Reviews trailers per patch
1 of 4 patches has a Reviewed-by or Acked-by.
| Patch | Sabrina Dubroca |
|---|---|
| 1/4 | R-b |
| 2/4 | |
| 3/4 | |
| 4/4 |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.
Cover letter [PATCH net v2 0/4] net: tls: net: tls: fix a few random bugs
Fix a few random bugs, from external reports and my local scan with various AI tools. Mostly corner cases in code which I don't think TLS maintainers would consider "battle tested".
v2:
- patches 2 and 3 are new (Sashiko report)
- patch 4 is rewritten to remove the code instead of fixing it
- drop the selftests, they were a little too specific, more PoC triggers than selftests, and Sashiko kept nit picking
- old patches 1 and 2 were already applied
- old patch 3 is gone since it can't trigger today (I will send it to net-next)
v1: https://lore.kernel.org/[email protected]
Jakub Kicinski (4):
net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg
ring
net: tls: prevent chain-after-chain in plain text SG
net: tls: fix use-after-free in tls_sw_sendmsg_locked after bpf
verdict
net: tls: remove bad rollback and UAF on ENOSPC
net/tls/tls_sw.c | 44 +++++++++++++++++++++----------------------- 1 file changed, 21 insertions(+), 23 deletions(-)
Signature · 1 line
2.54.0