David S. Miller 735ce972fb sctp: Make sure N * sizeof(union sctp_addr) does not overflow. ...

As noticed by Gabriel Campana, the kmalloc() length arg
passed in by sctp_getsockopt_local_addrs_old() can overflow
if ->addr_num is large enough.

Therefore, enforce an appropriate limit.

Signed-off-by: David S. Miller <davem@davemloft.net>

2008-06-20 22:04:34 -07:00

..

associola.c

sctp: Correclty set changeover_active for SFR-CACC

2008-06-16 17:00:29 -07:00

auth.c

[SCTP]: Update AUTH structures to match declarations in draft-16.

2008-02-28 16:45:04 -05:00

bind_addr.c

[SCTP]: "list_for_each()" -> "list_for_each_entry()" where appropriate.

2008-04-12 18:54:24 -07:00

chunk.c

SCTP: fix wrong debug counting of datamsg

2008-04-10 01:57:24 -07:00

command.c

[SCTP]: Remove sctp_add_cmd_sf wrapper bloat

2008-03-27 17:54:29 -07:00

debug.c

[SCTP]: Stop claiming that this is a "reference implementation"

2008-02-05 10:59:07 -05:00

endpointola.c

[SCTP]: Stop claiming that this is a "reference implementation"

2008-02-05 10:59:07 -05:00

input.c

SCTP: Remove useless assignment from __sctp_rcv_lookup_endpoint

2008-04-10 02:00:23 -07:00

inqueue.c

[SCTP]: Stop claiming that this is a "reference implementation"

2008-02-05 10:59:07 -05:00

ipv6.c

sctp: Fix ECN markings for IPv6

2008-06-04 12:40:15 -07:00

Kconfig

[SCTP]: Use crc32c library for checksum calculations.

2008-01-28 14:58:20 -08:00

Makefile

[SCTP]: Use crc32c library for checksum calculations.

2008-01-28 14:58:20 -08:00

objcnt.c

[NET]: Fix heavy stack usage in seq_file output routines.

2008-04-24 01:02:16 -07:00

output.c

sctp: Fix ECN markings for IPv6

2008-06-04 12:40:15 -07:00

outqueue.c

sctp: Flush the queue only once during fast retransmit.

2008-06-04 12:39:36 -07:00

primitive.c

[SCTP]: Stop claiming that this is a "reference implementation"

2008-02-05 10:59:07 -05:00

proc.c

[SCTP]: "list_for_each()" -> "list_for_each_entry()" where appropriate.

2008-04-12 18:54:24 -07:00

protocol.c

sctp: Correctly cleanup procfs entries upon failure.

2008-06-16 16:59:55 -07:00

sm_make_chunk.c

sctp: Fix use of uninitialized pointer

2008-05-13 23:25:00 -07:00

sm_sideeffect.c

Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6

2008-04-14 02:30:23 -07:00

sm_statefuns.c

Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6

2008-04-14 02:30:23 -07:00

sm_statetable.c

[SCTP]: Stop claiming that this is a "reference implementation"

2008-02-05 10:59:07 -05:00

socket.c

sctp: Make sure N * sizeof(union sctp_addr) does not overflow.

2008-06-20 22:04:34 -07:00

ssnmap.c

[SCTP]: Stop claiming that this is a "reference implementation"

2008-02-05 10:59:07 -05:00

sysctl.c

[SCTP]: Stop claiming that this is a "reference implementation"

2008-02-05 10:59:07 -05:00

transport.c

sctp: Start T3-RTX timer when fast retransmitting lowest TSN

2008-06-04 12:39:11 -07:00

tsnmap.c

[SCTP]: Stop claiming that this is a "reference implementation"

2008-02-05 10:59:07 -05:00

ulpevent.c

[SCTP]: Fix compiler warning about const qualifiers

2008-04-12 18:40:06 -07:00

ulpqueue.c

[SCTP]: Correctly reap SSNs when processing FORWARD_TSN chunk

2008-02-06 21:26:26 -05:00