net: Use sockaddr_storage for getsockopt(SO_PEERNAME).
authorKuniyuki Iwashima <kuniyu@amazon.com>
Sat, 29 Jul 2023 00:48:13 +0000 (17:48 -0700)
committerDavid S. Miller <davem@davemloft.net>
Mon, 31 Jul 2023 08:14:16 +0000 (09:14 +0100)
Commit df8fc4e934c1 ("kbuild: Enable -fstrict-flex-arrays=3") started
applying strict rules to standard string functions.

It does not work well with conventional socket code around each protocol-
specific sockaddr_XXX struct, which is cast from sockaddr_storage and has
a bigger size than fortified functions expect.  See these commits:

 commit 06d4c8a80836 ("af_unix: Fix fortify_panic() in unix_bind_bsd().")
 commit ecb4534b6a1c ("af_unix: Terminate sun_path when bind()ing pathname socket.")
 commit a0ade8404c3b ("af_packet: Fix warning of fortified memcpy() in packet_getname().")

We must cast the protocol-specific address back to sockaddr_storage
to call such functions.

However, in the case of getsockaddr(SO_PEERNAME), the rationale is a bit
unclear as the buffer is defined by char[128] which is the same size as
sockaddr_storage.

Let's use sockaddr_storage explicitly.

Signed-off-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/core/sock.c

index ab1e8d1..4ad267b 100644 (file)
@@ -1806,14 +1806,14 @@ int sk_getsockopt(struct sock *sk, int level, int optname,
 
        case SO_PEERNAME:
        {
-               char address[128];
+               struct sockaddr_storage address;
 
-               lv = sock->ops->getname(sock, (struct sockaddr *)address, 2);
+               lv = sock->ops->getname(sock, (struct sockaddr *)&address, 2);
                if (lv < 0)
                        return -ENOTCONN;
                if (lv < len)
                        return -EINVAL;
-               if (copy_to_sockptr(optval, address, len))
+               if (copy_to_sockptr(optval, &address, len))
                        return -EFAULT;
                goto lenout;
        }