Al Viro ee28b0da10 [PATCH] remote memory corruptor in ibmtr.c ...

ip_summed changes last summer had missed that one.  As the result,
we have ip_summed interpreted as CHECKSUM_PARTIAL now.  IOW,
->csum is interpreted as offset of checksum in the packet.  net/core/*
will both read and modify the value as that offset, with obvious
reasons.  At the very least it's a remote memory corruptor.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>

2006-12-04 19:32:44 -08:00

..

3c359_microcode.h

…

3c359.c

IRQ: Maintain regs pointer globally rather than passing to IRQ handlers

2006-10-05 15:10:12 +01:00

3c359.h

…

abyss.c

[PATCH] irq-flags: drivers/net: Use the new IRQF_ constants

2006-07-02 13:58:51 -07:00

abyss.h

…

ibmtr.c

[PATCH] remote memory corruptor in ibmtr.c

2006-12-04 19:32:44 -08:00

Kconfig

…

lanstreamer.c

IRQ: Maintain regs pointer globally rather than passing to IRQ handlers

2006-10-05 15:10:12 +01:00

lanstreamer.h

[PATCH] drivers/net/tokenring/lanstreamer.h Removal of old code

2006-09-25 20:01:19 -04:00

madgemc.c

IRQ: Maintain regs pointer globally rather than passing to IRQ handlers

2006-10-05 15:10:12 +01:00

madgemc.h

…

Makefile

…

olympic.c

[PATCH] pci_module_init() convertion in olympic.c

2006-12-02 00:11:55 -05:00

olympic.h

…

proteon.c

[PATCH] tokenring: fix module_init error handling

2006-10-31 20:22:05 -05:00

skisa.c

[PATCH] tokenring: fix module_init error handling

2006-10-31 20:22:05 -05:00

smctr_firmware.h

…

smctr.c

drivers/net: eliminate irq handler impossible checks, needless casts

2006-10-06 14:56:04 -04:00

smctr.h

…

tms380tr.c

drivers/net: eliminate irq handler impossible checks, needless casts

2006-10-06 14:56:04 -04:00

tms380tr.h

IRQ: Maintain regs pointer globally rather than passing to IRQ handlers

2006-10-05 15:10:12 +01:00

tmspci.c

BUG_ON cleanup in drivers/net/tokenring/

2006-10-03 23:34:11 +02:00