Re: [PATCH net] mptcp: avoid NULL-ptr derefence on fallback

2020-05-26 Thread David Miller
From: Paolo Abeni Date: Mon, 25 May 2020 16:38:47 +0200 > In the MPTCP receive path we must cope with TCP fallback > on blocking recvmsg(). Currently in such code path we detect > the fallback condition, but we don't fetch the struct socket > required for fallback. > > The above allowed syzkalle

Re: [PATCH net] mptcp: avoid NULL-ptr derefence on fallback

2020-05-26 Thread Mat Martineau
On Mon, 25 May 2020, Paolo Abeni wrote: In the MPTCP receive path we must cope with TCP fallback on blocking recvmsg(). Currently in such code path we detect the fallback condition, but we don't fetch the struct socket required for fallback. The above allowed syzkaller to trigger a NULL pointer