projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: eae9d3c) | patch
tipc: Fix NULL pointer dereference in __tipc_sendstream()
authorYueHaibing <yuehaibing@huawei.com>
Thu, 28 May 2020 14:34:07 +0000 (22:34 +0800)
committerDavid S. Miller <davem@davemloft.net>
Mon, 1 Jun 2020 22:33:24 +0000 (15:33 -0700)
commit4c21daae3dbc9f8536cc18e6e53627821fa2c90c
tree6fe27ee7cb67f7f769a420f7aa329bd1dd24d004tree | snapshot
parenteae9d3c0167df840e821317040efcf0ca6789cb9commit | diff
tipc: Fix NULL pointer dereference in __tipc_sendstream()

tipc_sendstream() may send zero length packet, then tipc_msg_append()
do not alloc skb, skb_peek_tail() will get NULL, msg_set_ack_required
will trigger NULL pointer dereference.

Reported-by: syzbot+8eac6d030e7807c21d32@syzkaller.appspotmail.com
Fixes: 0a3e060f340d ("tipc: add test for Nagle algorithm effectiveness")
Signed-off-by: YueHaibing <yuehaibing@huawei.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/tipc/socket.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git