sctp: validate INIT in COOKIE-ECHO when auth disabled
Get series with b4
b4 am [email protected]Versions newest first · linked by author and title
- v2 Latest2 patches 3 repliesIn review
- v12 patches 4 repliesSuperseded
Patches in v2 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/2 | sctp: factor out INIT verification failure handlingnet/ | +85 | 0 replies | |
| 2/2 | sctp: add INIT verification after cookie unpackingnet/ net/ | +32 | 2 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v2 yet.
Cover letter [PATCH net v2 0/2] sctp: validate INIT in COOKIE-ECHO when auth disabled
This series fixes a security gap in SCTP's COOKIE-ECHO handling when cookie authentication is disabled.
Currently, INIT chunks embedded in cookies are not re-verified after unpacking, creating a vulnerability when cookie_auth_enable=0. This series first refactors error handling, then adds the missing validation.
Changes in v2: see individual patch changelogs for details.
Xin Long (2):
sctp: factor out INIT verification failure handling
sctp: add INIT verification after cookie unpacking
net/sctp/sm_make_chunk.c | 3 +- net/sctp/sm_statefuns.c | 220 ++++++++++++++++++++------------------- 2 files changed, 117 insertions(+), 106 deletions(-)
Signature · 1 line
2.47.1