]> git.proxmox.com Git - mirror_ubuntu-kernels.git/commit
tools: psock_lib: harden socket filter used by psock tests
authorSowmini Varadhan <sowmini.varadhan@oracle.com>
Thu, 12 Jan 2017 13:10:11 +0000 (05:10 -0800)
committerDavid S. Miller <davem@davemloft.net>
Thu, 12 Jan 2017 15:23:26 +0000 (10:23 -0500)
commit4d7b9dc1f36a99423a6171d393040165fb135530
tree9cf9841d98aa2b47e2b41ab5c6e2ed652d2cce80
parent79471b10d67a52f5b3744d2e14c06437a65746f2
tools: psock_lib: harden socket filter used by psock tests

The filter added by sock_setfilter is intended to only permit
packets matching the pattern set up by create_payload(), but
we only check the ip_len, and a single test-character in
the IP packet to ensure this condition.

Harden the filter by adding additional constraints so that we only
permit UDP/IPv4 packets that meet the ip_len and test-character
requirements. Include the bpf_asm src as a comment, in case this
needs to be enhanced in the future

Signed-off-by: Sowmini Varadhan <sowmini.varadhan@oracle.com>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
tools/testing/selftests/net/psock_lib.h