Cong Wang e41f054847 tipc: use the right skb in tipc_sk_fill_sock_diag() ... Commit 4b2e6877b8 ("tipc: Fix namespace violation in tipc_sk_fill_sock_diag") tried to fix the crash but failed, the crash is still 100% reproducible with it. In tipc_sk_fill_sock_diag(), skb is the diag dump we are filling, it is not correct to retrieve its NETLINK_CB(), instead, like other protocol diag, we should use NETLINK_CB(cb->skb).sk here. Reported-by: <syzbot+326e587eff1074657718@syzkaller.appspotmail.com> Fixes: 4b2e6877b8 ("tipc: Fix namespace violation in tipc_sk_fill_sock_diag") Fixes: c30b70deb5 (tipc: implement socket diagnostics for AF_TIPC) Cc: GhantaKrishnamurthy MohanKrishna <mohan.krishna.ghanta.krishnamurthy@ericsson.com> Cc: Jon Maloy <jon.maloy@ericsson.com> Cc: Ying Xue <ying.xue@windriver.com> Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2018-04-08 12:34:29 -04:00
..
6lowpan
9p
802
8021q
appletalk
atm
ax25
batman-adv
bluetooth
bpf
bridge
caif
can
ceph
core	net: fix uninit-value in __hw_addr_add_ex()	2018-04-07 22:32:31 -04:00
dcb
dccp	dccp: initialize ireq->ir_mark	2018-04-07 22:32:31 -04:00
decnet
dns_resolver
dsa	net: dsa: Discard frames from unused ports	2018-04-08 10:34:49 -04:00
ethernet
hsr
ieee802154	inet: frags: fix ip6frag_low_thresh boundary	2018-04-04 12:04:59 -04:00
ife
ipv4	soreuseport: initialise timewait reuseport field	2018-04-07 22:32:32 -04:00
ipv6	net/ipv6: Increment OUTxxx counters after netfilter hook	2018-04-05 22:23:43 -04:00
iucv
kcm
key
l2tp
l3mdev
lapb
llc
mac80211
mac802154
mpls
ncsi
netfilter
netlabel
netlink	netlink: fix uninit-value in netlink_sendmsg	2018-04-07 22:32:31 -04:00
netrom
nfc
nsh
openvswitch
packet
phonet
psample
qrtr
rds
rfkill
rose
rxrpc	rxrpc: Fix undefined packet handling	2018-04-04 11:04:08 -04:00
sched	net_sched: fix a missing idr_remove() in u32_delete_key()	2018-04-07 12:36:45 -04:00
sctp	sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6	2018-04-08 12:29:41 -04:00
smc
strparser
sunrpc
switchdev
tipc	tipc: use the right skb in tipc_sk_fill_sock_diag()	2018-04-08 12:34:29 -04:00
tls
unix	af_unix: remove redundant lockdep class	2018-04-04 11:13:40 -04:00
vmw_vsock
wimax
wireless
x25
xfrm
compat.c
Kconfig
Makefile
socket.c
sysctl_net.c