Arjun Shankar 9c443ac455 socket: Check lengths before advancing pointer in CMSG_NXTHDR ... The inline and library functions that the CMSG_NXTHDR macro may expand to increment the pointer to the header before checking the stride of the increment against available space. Since C only allows incrementing pointers to one past the end of an array, the increment must be done after a length check. This commit fixes that and includes a regression test for CMSG_FIRSTHDR and CMSG_NXTHDR. The Linux, Hurd, and generic headers are all changed. Tested on Linux on armv7hl, i686, x86_64, aarch64, ppc64le, and s390x. [BZ #28846] Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>		2022-08-02 11:10:25 +02:00
..
linux	socket: Check lengths before advancing pointer in CMSG_NXTHDR	2022-08-02 11:10:25 +02:00