From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Miller Subject: Re: [PATCH net-next-2.6] netlink: netlink_recvmsg() fix Date: Mon, 26 Jul 2010 13:08:21 -0700 (PDT) Message-ID: <20100726.130821.179918086.davem@davemloft.net> References: <1279700420.2452.15.camel@edumazet-laptop> <1279701835.2452.17.camel@edumazet-laptop> <20100725.215548.112589000.davem@davemloft.net> Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: johannes@sipsolutions.net, netdev@vger.kernel.org To: eric.dumazet@gmail.com Return-path: Received: from 74-93-104-97-Washington.hfc.comcastbusiness.net ([74.93.104.97]:33065 "EHLO sunset.davemloft.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751349Ab0GZUIF (ORCPT ); Mon, 26 Jul 2010 16:08:05 -0400 In-Reply-To: <20100725.215548.112589000.davem@davemloft.net> Sender: netdev-owner@vger.kernel.org List-ID: From: David Miller Date: Sun, 25 Jul 2010 21:55:48 -0700 (PDT) > From: Eric Dumazet > Date: Wed, 21 Jul 2010 10:43:55 +0200 > >> [PATCH net-next-2.6 v3] netlink: netlink_recvmsg() fix >> >> commit 1dacc76d0014 >> (net/compat/wext: send different messages to compat tasks) >> introduced a race condition on netlink, in case MSG_PEEK is used. >> >> An skb given by skb_recv_datagram() might be shared, we must copy it >> before any modification, or risk fatal corruption. >> >> Signed-off-by: Eric Dumazet > > Applied, thanks Eric. I bet you didn't compile test the code you modified at all, but it's not your fault :-) The code is protected by CONFIG_WIRELESS_EXT but that protection is not valid. It should be protected by something like CONFIG_WEXT_CORE or similar. The only way to get CONFIG_WIRELESS_EXT set it to enable one of a few drivers, many of which are in staging. Anyways, just a heads up, I'll fix this up.