mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs.git
synced 2026-10-31 14:23:49 +01:00
Eric Dumazet
355b985537
net_hash_mix() currently uses kernel address of a struct net,
and is used in many places that could be used to reveal this
address to a patient attacker, thus defeating KASLR, for
the typical case (initial net namespace, &init_net is
not dynamically allocated)
I believe the original implementation tried to avoid spending
too many cycles in this function, but security comes first.
Also provide entropy regardless of CONFIG_NET_NS.
Fixes: 0b4419162a ("netns: introduce the net_hash_mix "salt" for hashes")
Signed-off-by: Eric Dumazet <[email protected]>
Reported-by: Amit Klein <[email protected]>
Reported-by: Benny Pinkas <[email protected]>
Cc: Pavel Emelyanov <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
12 lines
212 B
C
12 lines
212 B
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
#ifndef __NET_NS_HASH_H__
|
|
#define __NET_NS_HASH_H__
|
|
|
|
#include <net/net_namespace.h>
|
|
|
|
static inline u32 net_hash_mix(const struct net *net)
|
|
{
|
|
return net->hash_mix;
|
|
}
|
|
#endif
|