netlink: Don't shift with UB on nlk->ngroups
authorDmitry Safonov <dima@arista.com>
Mon, 30 Jul 2018 17:32:36 +0000 (18:32 +0100)
committerDavid S. Miller <davem@davemloft.net>
Mon, 30 Jul 2018 19:42:22 +0000 (12:42 -0700)
On i386 nlk->ngroups might be 32 or 0. Which leads to UB, resulting in
hang during boot.
Check for 0 ngroups and use (unsigned long long) as a type to shift.

Fixes: 7acf9d4237c4 ("netlink: Do not subscribe to non-existent groups").
Reported-by: kernel test robot <rong.a.chen@intel.com>
Signed-off-by: Dmitry Safonov <dima@arista.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/netlink/af_netlink.c

index ac805caed2e2c50efc732c2faeddc52c06f0ef48..7d860a22e5fb842eabdfd969040df7408cefb98a 100644 (file)
@@ -1008,7 +1008,11 @@ static int netlink_bind(struct socket *sock, struct sockaddr *addr,
                if (err)
                        return err;
        }
-       groups &= (1UL << nlk->ngroups) - 1;
+
+       if (nlk->ngroups == 0)
+               groups = 0;
+       else
+               groups &= (1ULL << nlk->ngroups) - 1;
 
        bound = nlk->bound;
        if (bound) {