Oliver Hartkopp a0dbd93fb1 can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs ... commit e7153bf70c upstream. KMSAN sysbot detected a read access to an untinitialized value in the headroom of an outgoing CAN related sk_buff. When using CAN sockets this area is filled appropriately - but when using a packet socket this initialization is missing. The problematic read access occurs in the CAN receive path which can only be triggered when the sk_buff is sent through a (virtual) CAN interface. So we check in the sending path whether we need to perform the missing initializations. Fixes: d3b58c47d3 ("can: replace timestamp as unique skb attribute") Reported-by: syzbot+b02ff0707a97e4e79ebb@syzkaller.appspotmail.com Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net> Tested-by: Oliver Hartkopp <socketcan@hartkopp.net> Cc: linux-stable <stable@vger.kernel.org> # >= v4.1 Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-01-14 20:08:28 +01:00
..
acpi	ACPI / utils: Move acpi_dev_get_first_match_dev() under CONFIG_ACPI	2019-12-17 19:56:29 +01:00
asm-generic	timekeeping/vsyscall: Update VDSO data unconditionally	2019-11-04 23:02:53 +01:00
clocksource	…
crypto	Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity	2019-09-27 19:37:27 -07:00
drm	drm: mst: Fix query_payload ack reply struct	2019-12-31 16:42:19 +01:00
dt-bindings	Main MIPS changes for v5.4:	2019-09-22 09:30:30 -07:00
keys	…
kvm	…
linux	can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs	2020-01-14 20:08:28 +01:00
math-emu	…
media	…
misc	…
net	net: annotate lockless accesses to sk->sk_pacing_shift	2020-01-09 10:20:07 +01:00
pcmcia	…
ras	…
rdma	RDMA/core: Fix ib_dma_max_seg_size()	2019-12-17 19:56:41 +01:00
scsi	scsi: target: iscsi: Wait for all commands to finish before freeing a session	2020-01-04 19:18:17 +01:00
soc	Char/Misc driver patches for 5.4-rc1	2019-09-18 11:14:31 -07:00
sound	ALSA: hda: Modify stream stripe mask only when needed	2019-12-13 08:42:39 +01:00
target	…
trace	tracing: Change offset type to s32 in preempt/irq tracepoints	2020-01-14 20:08:22 +01:00
uapi	Input: input_event - fix struct padding on sparc64	2020-01-14 20:08:24 +01:00
vdso	…
video	…
xen	xen: fixes and cleanups for 5.4-rc2	2019-10-04 11:13:09 -07:00
Kbuild	- New Drivers	2019-09-23 19:37:49 -07:00