can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting
authorOliver Hartkopp <socketcan@hartkopp.net>
Sun, 15 May 2022 18:16:33 +0000 (20:16 +0200)
committerMarc Kleine-Budde <mkl@pengutronix.de>
Mon, 16 May 2022 20:03:45 +0000 (22:03 +0200)
Commit 3ea566422cbd ("can: isotp: sanitize CAN ID checks in
isotp_bind()") checks the given CAN ID address information by
sanitizing the input values.

This check (silently) removes obsolete bits by masking the given CAN
IDs.

Derek Will suggested to give a feedback to the application programmer
when the 'sanitizing' was actually needed which means the programmer
provided CAN ID content in a wrong format (e.g. SFF CAN IDs with a CAN
ID > 0x7FF).

Link: https://lore.kernel.org/all/20220515181633.76671-1-socketcan@hartkopp.net
Suggested-by: Derek Will <derekrobertwill@gmail.com>
Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net>
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
net/can/isotp.c

index 2caeeae..4a4007f 100644 (file)
@@ -1232,6 +1232,11 @@ static int isotp_bind(struct socket *sock, struct sockaddr *uaddr, int len)
        else
                rx_id &= CAN_SFF_MASK;
 
+       /* give feedback on wrong CAN-ID values */
+       if (tx_id != addr->can_addr.tp.tx_id ||
+           rx_id != addr->can_addr.tp.rx_id)
+               return -EINVAL;
+
        if (!addr->can_ifindex)
                return -ENODEV;