projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4f0496d) | patch
Smack: Fix handling of IPv4 traffic received by PF_INET6 sockets
authorPiotr Sawicki <p.sawicki2@partner.samsung.com>
Thu, 19 Jul 2018 09:42:58 +0000 (11:42 +0200)
committerCasey Schaufler <casey@schaufler-ca.com>
Mon, 23 Jul 2018 19:59:41 +0000 (12:59 -0700)
commit129a99890936766f4b69b9da7ed88366313a9210
tree181e423635ece00b2d29023cc17465f793700b43tree | snapshot
parent4f0496d8ffa3ed5956a2ddee5d84f0246977799dcommit | diff
Smack: Fix handling of IPv4 traffic received by PF_INET6 sockets

A socket which has sk_family set to PF_INET6 is able to receive not
only IPv6 but also IPv4 traffic (IPv4-mapped IPv6 addresses).

Prior to this patch, the smk_skb_to_addr_ipv6() could have been
called for socket buffers containing IPv4 packets, in result such
traffic was allowed.

Signed-off-by: Piotr Sawicki <p.sawicki2@partner.samsung.com>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
security/smack/smack_lsm.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git