Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c68e747d authored by Tetsuo Handa's avatar Tetsuo Handa Committed by David S. Miller
Browse files

llc: Check address length before reading address field 



KMSAN will complain if valid address length passed to bind() is shorter
than sizeof(struct sockaddr_llc) bytes.

Signed-off-by: default avatarTetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent bd7d46dd

net/llc/af_llc.c

+1 −2
Original line number Diff line number Diff line
@@ -320,14 +320,13 @@ static int llc_ui_bind(struct socket *sock, struct sockaddr *uaddr, int addrlen) 
	struct llc_sap *sap;

	int rc = -EINVAL;



	dprintk("%s: binding %02X\n", __func__, addr->sllc_sap);



	lock_sock(sk);

	if (unlikely(!sock_flag(sk, SOCK_ZAPPED) || addrlen != sizeof(*addr)))

		goto out;

	rc = -EAFNOSUPPORT;

	if (unlikely(addr->sllc_family != AF_LLC))

		goto out;

	dprintk("%s: binding %02X\n", __func__, addr->sllc_sap);

	rc = -ENODEV;

	rcu_read_lock();

	if (sk->sk_bound_dev_if) {