From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?utf-8?B?a2l5aW4o5bC55LquKQ==?= Subject: RE: [PATCH net v2] net/x25: prevent a couple of overflows(Internet mail) Date: Wed, 2 Dec 2020 07:43:51 +0000 Message-ID: <1a30d292e2b74a3ba226ace1eefb2084@tencent.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tencent.com; s=s202002; t=1606895134; bh=Z70+RP6pppkhHfN5BMvGoKQ19LZCgpxp9n4fcThRLkY=; h=From:To:CC:Subject:Date:References:In-Reply-To; b=CLXghOTISS+z+eyzMYXx2gG6FKuxE7y3Zd73x6Tq9qDXvmYFhY7sLF0Z8ilfeNHJE Avw8FgOoBuijIbv9qkCMhhQifSG+HGTD9wehcOzy9eTd+02Ww8vRItilYSWl/4k6XR jSmD9uKQOZqh/gkAAJUDqwnGxtddm0CcRnF/tqjw= In-Reply-To: Content-Language: zh-CN List-ID: To: Dan Carpenter , Martin Schiller Cc: "David S. Miller" , Jakub Kicinski , "linux-x25@vger.kernel.org" , "netdev@vger.kernel.org" , Andrew Hendry , "security@kernel.org" , "linux-distros@vs.openwall.org" , =?utf-8?B?aHVudGNoZW4o6ZmI6ZizKQ==?= , =?utf-8?B?ZGFubnl3YW5nKOeOi+Wuhyk=?= , "kernel-janitors@vger.kernel.org" SGkgRGFuLA0KICAgIEkgdGhpbmsgdGhlIHN0cm5sZW4gaXMgYmV0dGVyLiB0aGUga2VybmVsIGRv ZXNuJ3QgbmVlZCB0byBhZGp1c3QgdXNlciBsYW5kIG1pc3Rha2UgYnkgcHV0dGluZyBhIE5VTEwg dGVybWluYXRvci4ganVzdCByZXR1cm4gYW4gZXJyb3IgdG8gbGV0IHRoZSB1c2VyIGxhbmQgcHJv Z3JhbSBmaXggdGhlIHdyb25nIGFkZHJlc3MuDQoNClJlZ2FyZHMsDQpraXlpbg0KDQo+IC0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IERhbiBDYXJwZW50ZXIgW21haWx0bzpkYW4u Y2FycGVudGVyQG9yYWNsZS5jb21dDQo+IFNlbnQ6IFR1ZXNkYXksIERlY2VtYmVyIDEsIDIwMjAg MTE6MTUgUE0NCj4gVG86IE1hcnRpbiBTY2hpbGxlciA8bXNAZGV2LnRkdC5kZT4NCj4gQ2M6IERh dmlkIFMuIE1pbGxlciA8ZGF2ZW1AZGF2ZW1sb2Z0Lm5ldD47IEpha3ViIEtpY2luc2tpIDxrdWJh QGtlcm5lbC5vcmc+Ow0KPiBsaW51eC14MjVAdmdlci5rZXJuZWwub3JnOyBuZXRkZXZAdmdlci5r ZXJuZWwub3JnOyBBbmRyZXcgSGVuZHJ5DQo+IDxhbmRyZXcuaGVuZHJ5QGdtYWlsLmNvbT47IGtp eWluKOWwueS6rikgPGtpeWluQHRlbmNlbnQuY29tPjsNCj4gc2VjdXJpdHlAa2VybmVsLm9yZzsg bGludXgtZGlzdHJvc0B2cy5vcGVud2FsbC5vcmc7IGh1bnRjaGVuKOmZiOmYsykNCj4gPGh1bnRj aGVuQHRlbmNlbnQuY29tPjsgZGFubnl3YW5nKOeOi+WuhykgPGRhbm55d2FuZ0B0ZW5jZW50LmNv bT47DQo+IGtlcm5lbC1qYW5pdG9yc0B2Z2VyLmtlcm5lbC5vcmcNCj4gU3ViamVjdDogW1BBVENI IG5ldCB2Ml0gbmV0L3gyNTogcHJldmVudCBhIGNvdXBsZSBvZiBvdmVyZmxvd3MoSW50ZXJuZXQg bWFpbCkNCj4gDQo+IFRoZSAueDI1X2FkZHJbXSBhZGRyZXNzIGNvbWVzIGZyb20gdGhlIHVzZXIg YW5kIGlzIG5vdCBuZWNlc3NhcmlseSBOVUwNCj4gdGVybWluYXRlZC4gIFRoaXMgbGVhZHMgdG8g YSBjb3VwbGUgcHJvYmxlbXMuICBUaGUgZmlyc3QgcHJvYmxlbSBpcyB0aGF0IHRoZQ0KPiBzdHJs ZW4oKSBpbiB4MjVfYmluZCgpIGNhbiByZWFkIGJleW9uZCB0aGUgZW5kIG9mIHRoZSBidWZmZXIu DQo+IA0KPiBUaGUgc2Vjb25kIHByb2JsZW0gaXMgbW9yZSBzdWJ0bGUgYW5kIGNvdWxkIHJlc3Vs dCBpbiBtZW1vcnkgY29ycnVwdGlvbi4NCj4gVGhlIGNhbGwgdHJlZSBpczoNCj4gICB4MjVfY29u bmVjdCgpDQo+ICAgLS0+IHgyNV93cml0ZV9pbnRlcm5hbCgpDQo+ICAgICAgIC0tPiB4MjVfYWRk cl9hdG9uKCkNCj4gDQo+IFRoZSAueDI1X2FkZHJbXSBidWZmZXJzIGFyZSBjb3BpZWQgdG8gdGhl ICJhZGRyZXNzZXMiIGJ1ZmZlciBmcm9tDQo+IHgyNV93cml0ZV9pbnRlcm5hbCgpIHNvIGl0IHdp bGwgbGVhZCB0byBzdGFjayBjb3JydXB0aW9uLg0KPiANCj4gVmVyaWZ5IHRoYXQgdGhlIHN0cmlu Z3MgYXJlIE5VTCB0ZXJtaW5hdGVkIGFuZCByZXR1cm4gLUVJTlZBTCBpZiB0aGV5IGFyZSBub3Qu DQo+IA0KPiBSZXBvcnRlZC1ieTogImtpeWluKOWwueS6rikiIDxraXlpbkB0ZW5jZW50LmNvbT4N Cj4gU2lnbmVkLW9mZi1ieTogRGFuIENhcnBlbnRlciA8ZGFuLmNhcnBlbnRlckBvcmFjbGUuY29t Pg0KPiAtLS0NCj4gVGhlIGZpcnN0IHBhdGNoIHB1dCBhIE5VTCB0ZXJtaW5hdG9yIG9uIHRoZSBl bmQgb2YgdGhlIHN0cmluZyBhbmQgdGhpcyBwYXRjaA0KPiByZXR1cm5zIGFuIGVycm9yIGluc3Rl YWQuICBJIGRvbid0IGhhdmUgYSBzdHJvbmcgcHJlZmVyZW5jZSwgd2hpY2ggcGF0Y2ggdG8gZ28N Cj4gd2l0aC4NCj4gDQo+ICBuZXQveDI1L2FmX3gyNS5jIHwgNiArKysrLS0NCj4gIDEgZmlsZSBj aGFuZ2VkLCA0IGluc2VydGlvbnMoKyksIDIgZGVsZXRpb25zKC0pDQo+IA0KPiBkaWZmIC0tZ2l0 IGEvbmV0L3gyNS9hZl94MjUuYyBiL25ldC94MjUvYWZfeDI1LmMgaW5kZXgNCj4gOTIzMmNkYjQy YWQ5Li5kNDFmZmZiMjUwN2IgMTAwNjQ0DQo+IC0tLSBhL25ldC94MjUvYWZfeDI1LmMNCj4gKysr IGIvbmV0L3gyNS9hZl94MjUuYw0KPiBAQCAtNjc1LDcgKzY3NSw4IEBAIHN0YXRpYyBpbnQgeDI1 X2JpbmQoc3RydWN0IHNvY2tldCAqc29jaywgc3RydWN0DQo+IHNvY2thZGRyICp1YWRkciwgaW50 IGFkZHJfbGVuKQ0KPiAgCWludCBsZW4sIGksIHJjID0gMDsNCj4gDQo+ICAJaWYgKGFkZHJfbGVu ICE9IHNpemVvZihzdHJ1Y3Qgc29ja2FkZHJfeDI1KSB8fA0KPiAtCSAgICBhZGRyLT5zeDI1X2Zh bWlseSAhPSBBRl9YMjUpIHsNCj4gKwkgICAgYWRkci0+c3gyNV9mYW1pbHkgIT0gQUZfWDI1IHx8 DQo+ICsJICAgIHN0cm5sZW4oYWRkci0+c3gyNV9hZGRyLngyNV9hZGRyLCBYMjVfQUREUl9MRU4p ID09DQo+IFgyNV9BRERSX0xFTikgew0KPiAgCQlyYyA9IC1FSU5WQUw7DQo+ICAJCWdvdG8gb3V0 Ow0KPiAgCX0NCj4gQEAgLTc2OSw3ICs3NzAsOCBAQCBzdGF0aWMgaW50IHgyNV9jb25uZWN0KHN0 cnVjdCBzb2NrZXQgKnNvY2ssIHN0cnVjdA0KPiBzb2NrYWRkciAqdWFkZHIsDQo+IA0KPiAgCXJj ID0gLUVJTlZBTDsNCj4gIAlpZiAoYWRkcl9sZW4gIT0gc2l6ZW9mKHN0cnVjdCBzb2NrYWRkcl94 MjUpIHx8DQo+IC0JICAgIGFkZHItPnN4MjVfZmFtaWx5ICE9IEFGX1gyNSkNCj4gKwkgICAgYWRk ci0+c3gyNV9mYW1pbHkgIT0gQUZfWDI1IHx8DQo+ICsJICAgIHN0cm5sZW4oYWRkci0+c3gyNV9h ZGRyLngyNV9hZGRyLCBYMjVfQUREUl9MRU4pID09DQo+IFgyNV9BRERSX0xFTikNCj4gIAkJZ290 byBvdXQ7DQo+IA0KPiAgCXJjID0gLUVORVRVTlJFQUNIOw0KPiAtLQ0KPiAyLjI5LjINCg0K