diff options
| author | Julian Anastasov <ja@ssi.bg> | 2026-09-28 00:08:07 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2026-10-14 11:09:27 +0200 |
| commit | 3e3fe49e8678c1a3d535ed02f32a9a6e80674263 (patch) | |
| tree | 4a1aa2a971e56271e7ae9f042e9a9432b9d1047e /include/linux/errqueue.h | |
| parent | 99fa01d7d1feb14389487d72652065861f7640f6 (diff) | |
ipvs: fix buffer overflow when sending sync messages
Sashiko reports for possible heap buffer overflow when
generating sync message for the v0 and v1 message formats.
We should read the cp->flags only once because another
CPU can concurrently set the SEQ_MASK between the two
reads.
Note that IPVS does not set the SEQ_MASK anymore for the
ip_vs_ftp.c helper starting from commit 7f1c40757951
("IPVS: make FTP work with full NAT support") (2.6.36+),
so the problem should not be reproducible.
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Link: https://sashiko.dev/#/patchset/20260903004149.1037028-1-pablo%40netfilter.org
Link: https://sashiko.dev/#/patchset/20260909111338.44357-1-ja%40ssi.bg
Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/linux/errqueue.h')
0 files changed, 0 insertions, 0 deletions