tools: hv: Netlink source address validation allows DoS
authorTomas Hozza <thozza@redhat.com>
Thu, 8 Nov 2012 09:53:29 +0000 (10:53 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Wed, 27 Mar 2013 02:41:03 +0000 (02:41 +0000)
commit723353fdc4de94bf78026b6c17cf9dbbe5f29a1a
treef4c70b068a7ff5e9467fceeec2b76e28b0a6b1c0
parentbd8a48b71de28098f662ce8dfb919ea4eff28103
tools: hv: Netlink source address validation allows DoS

commit 95a69adab9acfc3981c504737a2b6578e4d846ef upstream.

The source code without this patch caused hypervkvpd to exit when it processed
a spoofed Netlink packet which has been sent from an untrusted local user.
Now Netlink messages with a non-zero nl_pid source address are ignored
and a warning is printed into the syslog.

Signed-off-by: Tomas Hozza <thozza@redhat.com>
Acked-by: K. Y. Srinivasan <kys@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
tools/hv/hv_kvp_daemon.c