On Sat, Apr 02, 2022 at 11:12:39AM +0200, Oliver Hartkopp wrote: > From: Oliver Hartkopp <socketcan@xxxxxxxxxxxx> > > commit 3ea566422cbde9610c2734980d1286ab681bb40e upstream. > > Syzbot created an environment that lead to a state machine status that > can not be reached with a compliant CAN ID address configuration. > The provided address information consisted of CAN ID 0x6000001 and 0xC28001 > which both boil down to 11 bit CAN IDs 0x001 in sending and receiving. > > Sanitize the SFF/EFF CAN ID values before performing the address checks. > > Cc: stable@xxxxxxxxxxxxxxx # v5.10 - v5.17 > Fixes: e057dd3fc20f ("can: add ISO 15765-2:2016 transport protocol") > Link: https://lore.kernel.org/all/20220316164258.54155-1-socketcan@xxxxxxxxxxxx > Reported-by: syzbot+2339c27f5c66c652843e@xxxxxxxxxxxxxxxxxxxxxxxxx > Signed-off-by: Oliver Hartkopp <socketcan@xxxxxxxxxxxx> > Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx> > --- > net/can/isotp.c | 38 ++++++++++++++++++++------------------ > 1 file changed, 20 insertions(+), 18 deletions(-) Now queued up, thanks. greg k-h