Re: net/sctp: slab-out-of-bounds in sctp_sf_ootb

2016-10-25 Thread Marcelo Ricardo Leitner
On Tue, Oct 25, 2016 at 02:23:48PM +0200, Andrey Konovalov wrote: > Hi Marcelo, > > I can confirm that your patch fixes the issue for me. > > Tested-by: Andrey Konovalov Great, thanks Andrey! I'll post the patch in a few. > > On Mon, Oct 24, 2016 at 9:44 PM, Marcelo Ricardo Leitner > wrote:

Re: net/sctp: slab-out-of-bounds in sctp_sf_ootb

2016-10-25 Thread Andrey Konovalov
Hi Marcelo, I can confirm that your patch fixes the issue for me. Tested-by: Andrey Konovalov On Mon, Oct 24, 2016 at 9:44 PM, Marcelo Ricardo Leitner wrote: > Hi Andrey, > > On Mon, Oct 24, 2016 at 05:30:04PM +0200, Andrey Konovalov wrote: >> The problem is that sctp_walk_errors walks the chu

Re: net/sctp: slab-out-of-bounds in sctp_sf_ootb

2016-10-24 Thread Marcelo Ricardo Leitner
Hi Andrey, On Mon, Oct 24, 2016 at 05:30:04PM +0200, Andrey Konovalov wrote: > The problem is that sctp_walk_errors walks the chunk before its length > is checked for overflow. Exactly. The check is done too late, for the 2nd and subsequent chunks only. Please try the following patch, thanks. Not