diff options
| author | Piotr Sawicki <p.sawicki2@partner.samsung.com> | 2018-07-19 11:42:58 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2018-09-26 08:36:33 +0200 |
| commit | a64fa2731c6012410de4c7921a77741f8ea78bdc (patch) | |
| tree | ce24c8561918b3d3b1bda0f996919009e203cac0 /security/selinux | |
| parent | 03758ba70b1727b0480d680fe06be6b78831361a (diff) | |
Smack: Fix handling of IPv4 traffic received by PF_INET6 sockets
[ Upstream commit 129a99890936766f4b69b9da7ed88366313a9210 ]
A socket which has sk_family set to PF_INET6 is able to receive not
only IPv6 but also IPv4 traffic (IPv4-mapped IPv6 addresses).
Prior to this patch, the smk_skb_to_addr_ipv6() could have been
called for socket buffers containing IPv4 packets, in result such
traffic was allowed.
Signed-off-by: Piotr Sawicki <p.sawicki2@partner.samsung.com>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'security/selinux')
0 files changed, 0 insertions, 0 deletions