From d2bbcbfc4b01777b9aada434d42c341eddf29a2d Mon Sep 17 00:00:00 2001 From: Ian Moffett Date: Tue, 29 Jul 2025 03:56:04 -0400 Subject: kernel: socket: Ensure AF_UNIX in recvmsg() Ensure that the file descriptor represented by 'socket' is of type AF_UNIX before performing the rest of recvmsg() Signed-off-by: Ian Moffett --- sys/kern/kern_socket.c | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'sys/kern/kern_socket.c') diff --git a/sys/kern/kern_socket.c b/sys/kern/kern_socket.c index 9b98ccc..8be5031 100644 --- a/sys/kern/kern_socket.c +++ b/sys/kern/kern_socket.c @@ -403,6 +403,7 @@ ssize_t recvmsg(int socket, struct msghdr *msg, int flags) { struct ksocket *ksock; + struct sockaddr_un *un; struct cmsg *cmsg, *tmp; struct cmsghdr *cmsghdr; struct cmsg_list *clp; @@ -418,6 +419,12 @@ recvmsg(int socket, struct msghdr *msg, int flags) return error; } + /* Must be a unix domain socket */ + un = &ksock->un; + if (un->sun_family != AF_UNIX) { + return -EBADF; + } + /* Grab the control message list */ clp = &ksock->cmsg_list; cmsg = TAILQ_FIRST(&clp->list); -- cgit v1.2.3