Re: [PATCH net 1/2] batman-adv: reject oversized global TT response buffers
| Newsgroups | org.open-mesh.lists.batman,org.kernel.vger.netdev,org.kernel.vger.stable |
|---|---|
| Message-ID | <177570002357.953143.3280189136454174077.git-patchwork-notify@kernel.org> |
Hello: This series was applied to netdev/net.git (main) by Simon Wunderlich <[email protected]>: On Wed, 8 Apr 2026 13:02:54 +0200 you wrote: > From: Ruide Cao <[email protected]> > > batadv_tt_prepare_tvlv_global_data() builds the allocation length for a > global TT response in 16-bit temporaries. When a remote originator > advertises a large enough global TT, the TT payload length plus the VLAN > header offset can exceed 65535 and wrap before kmalloc(). > > [...] Here is the summary with links: - [net,1/2] batman-adv: reject oversized global TT response buffers https://git.kernel.org/netdev/net/c/3a359bf5c61d - [net,2/2] batman-adv: hold claim backbone gateways by reference https://git.kernel.org/netdev/net/c/82d8701b2c93 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html