From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8E6FEC433EF for ; Mon, 11 Oct 2021 14:12:36 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 7A7E1610E8 for ; Mon, 11 Oct 2021 14:12:36 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S243146AbhJKOOe (ORCPT ); Mon, 11 Oct 2021 10:14:34 -0400 Received: from mail.kernel.org ([198.145.29.99]:33434 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S242576AbhJKOMc (ORCPT ); Mon, 11 Oct 2021 10:12:32 -0400 Received: by mail.kernel.org (Postfix) with ESMTPSA id 1C3326128B; Mon, 11 Oct 2021 14:03:39 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1633961020; bh=8as1fyA/hIvhwofjaejzisdh+6ah+Gud2BrDaIsdHdM=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=f0gS8F1ZI6hO77EiDoBzIazmcCf5xpWSOd3Q7FZrjR28RpPlSF/lc7HkDpR2WDM2x PCI9OJ4/fxGxMkr8z+Bgl1DirOBEbPUvLGcO1LPSs71K04VxzadtUjyg1yHvPU+zp+ 43p6x7xo2coMr0vcPNyBsRUEb6kbIwC6dGo5c5C0= From: Greg Kroah-Hartman To: linux-kernel@vger.kernel.org Cc: Greg Kroah-Hartman , stable@vger.kernel.org, Eric Dumazet , Roopa Prabhu , "David S. Miller" , Sasha Levin Subject: [PATCH 5.14 111/151] rtnetlink: fix if_nlmsg_stats_size() under estimation Date: Mon, 11 Oct 2021 15:46:23 +0200 Message-Id: <20211011134521.404057009@linuxfoundation.org> X-Mailer: git-send-email 2.33.0 In-Reply-To: <20211011134517.833565002@linuxfoundation.org> References: <20211011134517.833565002@linuxfoundation.org> User-Agent: quilt/0.66 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Precedence: bulk List-ID: X-Mailing-List: stable@vger.kernel.org From: Eric Dumazet [ Upstream commit d34367991933d28bd7331f67a759be9a8c474014 ] rtnl_fill_statsinfo() is filling skb with one mandatory if_stats_msg structure. nlmsg_put(skb, pid, seq, type, sizeof(struct if_stats_msg), flags); But if_nlmsg_stats_size() never considered the needed storage. This bug did not show up because alloc_skb(X) allocates skb with extra tailroom, because of added alignments. This could very well be changed in the future to have deterministic behavior. Fixes: 10c9ead9f3c6 ("rtnetlink: add new RTM_GETSTATS message to dump link stats") Signed-off-by: Eric Dumazet Cc: Roopa Prabhu Acked-by: Roopa Prabhu Signed-off-by: David S. Miller Signed-off-by: Sasha Levin --- net/core/rtnetlink.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/core/rtnetlink.c b/net/core/rtnetlink.c index 662eb1c37f47..10e2a0e4804b 100644 --- a/net/core/rtnetlink.c +++ b/net/core/rtnetlink.c @@ -5265,7 +5265,7 @@ nla_put_failure: static size_t if_nlmsg_stats_size(const struct net_device *dev, u32 filter_mask) { - size_t size = 0; + size_t size = NLMSG_ALIGN(sizeof(struct if_stats_msg)); if (stats_attr_valid(filter_mask, IFLA_STATS_LINK_64, 0)) size += nla_total_size_64bit(sizeof(struct rtnl_link_stats64)); -- 2.33.0