BACKPORT: net: ipv4: fix for a race condition in raw_sendmsg
[ Upstream commit 8f659a03a0ba9289b9aeb9b4470e6fb263d6f483 ]
inet->hdrincl is racy, and could lead to uninitialized stack pointer
usage, so its value should be read only once.
BUG=chromium:798133
TEST=Build and run
Change-Id: I961423eee8404786e2c84b8bb4b3354e259bf1af
Fixes: c008ba5bdc9f ("ipv4: Avoid reading user iov twice after raw_probe_proto_opt")
Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Conflicts:
net/ipv4/raw.c
Signed-off-by: Guenter Roeck <groeck@chromium.org>
(cherry picked from commit be27b620a861)
Reviewed-on: https://chromium-review.googlesource.com/860563
1 file changed
