forked from luck/tmp_suning_uos_patched
52ad5da8e3
commit 75a2f31520095600f650597c0ac41f48b5ba0068 upstream. This ioctl() implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. If the socket was not bound, two separate problems would occur: 1) We'd send an pipe enablement request with an invalid source object. 2) Later socket calls could BUG on the socket unexpectedly being connected yet not bound to a valid object. Reported-by: syzbot+2dc91e7fc3dea88b1e8a@syzkaller.appspotmail.com Signed-off-by: Rémi Denis-Courmont <remi@remlab.net> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
||
|---|---|---|
| .. | ||
| af_phonet.c | ||
| datagram.c | ||
| Kconfig | ||
| Makefile | ||
| pep-gprs.c | ||
| pep.c | ||
| pn_dev.c | ||
| pn_netlink.c | ||
| socket.c | ||
| sysctl.c | ||