diff options
| author | Lyes Bourennani <lbourennani@fuzzinglabs.com> | 2026-04-22 01:20:22 +0300 |
|---|---|---|
| committer | Sven Eckelmann <sven@narfation.org> | 2026-05-02 22:58:27 +0300 |
| commit | 0799e5943611006b346b8813c7daf7dd5aa26bfd (patch) | |
| tree | 2c8f90ba922babc0ee54b9ef5a1eb09996e2ce9b /scripts | |
| parent | 1f5ffc672165ff851063a5fd044b727ab2517ae3 (diff) | |
| download | linux-0799e5943611006b346b8813c7daf7dd5aa26bfd.tar.xz | |
batman-adv: fix integer overflow on buff_pos
Fixing an integer overflow present in batadv_iv_ogm_send_to_if. The size
check is done using the int type in batadv_iv_ogm_aggr_packet whereas the
buff_pos variable uses the s16 type. This could lead to an out-of-bound
read.
Cc: stable@vger.kernel.org
Fixes: c6c8fea29769 ("net: Add batman-adv meshing protocol")
Signed-off-by: Lyes Bourennani <lbourennani@fuzzinglabs.com>
Signed-off-by: Alexis Pinson <apinson@fuzzinglabs.com>
Signed-off-by: Sven Eckelmann <sven@narfation.org>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions