Skip to content

Conversation

zephyrbot
Copy link

@zephyrbot zephyrbot commented Feb 2, 2023

Backport e540a98 from #54371

Fixes #55069

The net_pkt pointer provided to net pkt commands was not validated in
any way. Therefore it was fairly easy to crash an application by
providing invalid address.

This commit adds the pointer validation. It's checked whether the
pointer provided belongs to any net_pkt pools known to the net stack,
and if the pointer offset within the slab actually points to the
beginning of the net_pkt structure.

Signed-off-by: Robert Lubos <[email protected]>
(cherry picked from commit e540a98)
@cfriedt
Copy link
Member

cfriedt commented Feb 3, 2023

Can someone please create an issue for this backport? @rlubos? @mbolivar-nordic

@cfriedt cfriedt merged commit e02a337 into v2.7-branch Feb 28, 2023
@nashif nashif deleted the backport-54371-to-v2.7-branch branch February 13, 2024 15:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

4 participants