Pekka Enberg 93bc4e89c2 netfilter: fix double-free and use-after free ...

As suggested by Patrick McHardy, introduce a __krealloc() that doesn't
free the original buffer to fix a double-free and use-after-free bug
introduced by me in netfilter that uses RCU.

Reported-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pekka Enberg <penberg@cs.helsinki.fi>
Tested-by: Dieter Ries <clip2@gmx.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2008-07-26 17:49:33 -07:00

..

allocpercpu.c

Christoph has moved

2008-07-04 10:40:04 -07:00

backing-dev.c

mm: bdi: fix race in bdi_class device creation

2008-05-20 13:31:53 -07:00

bootmem.c

Add return value to reserve_bootmem_node()

2008-06-21 11:25:10 -07:00

bounce.c

block: Initial support for data-less (or empty) barrier support

2007-10-16 11:03:56 +02:00

dmapool.c

dmapool: enable debugging for CONFIG_SLUB_DEBUG_ON too

2008-04-28 08:58:20 -07:00

fadvise.c

xip: support non-struct page backed memory

2008-04-28 08:58:23 -07:00

filemap_xip.c

xip: support non-struct page backed memory

2008-04-28 08:58:23 -07:00

filemap.c

vfs: export filemap_fdatawrite_range()

2008-07-11 19:27:31 -04:00

fremap.c

mm: fix various kernel-doc comments

2008-03-19 18:53:35 -07:00

highmem.c

highmem: Export totalhigh_pages.

2008-07-19 22:39:46 -07:00

hugetlb.c

hugetlb: fix lockdep error

2008-06-06 11:29:09 -07:00

internal.h

memory hotplug: free memmaps allocated by bootmem

2008-04-28 08:58:26 -07:00

Kconfig

Merge git://git.kernel.org/pub/scm/linux/kernel/git/hskinnemoen/avr32-2.6

2008-07-14 13:37:29 -07:00

maccess.c

kgdb: fix optional arch functions and probe_kernel_*

2008-04-17 20:05:39 +02:00

madvise.c

xip: support non-struct page backed memory

2008-04-28 08:58:23 -07:00

Makefile

uaccess: add probe_kernel_write()

2008-04-17 20:05:36 +02:00

memcontrol.c

memcg: simple stats for memory resource controller

2008-05-01 08:04:02 -07:00

memory_hotplug.c

memory_hotplug: always initialize pageblock bitmap

2008-05-14 19:11:15 -07:00

memory.c

get_user_pages(): fix possible page leak on oom

2008-07-04 10:40:04 -07:00

mempolicy.c

mempolicy: mask off internal flags for userspace API

2008-07-04 13:03:05 -07:00

mempool.c

spelling fixes: mm/

2007-10-20 01:27:18 +02:00

migrate.c

Christoph has moved

2008-07-04 10:40:04 -07:00

mincore.c

mm: remove nopage

2008-04-28 08:58:18 -07:00

mlock.c

do not limit locked memory when RLIMIT_MEMLOCK is RLIM_INFINITY

2007-07-16 09:05:37 -07:00

mmap.c

mm: Allow architectures to define additional protection bits

2008-07-09 16:30:45 +10:00

mmzone.c

mm: filter based on a nodemask as well as a gfp_mask

2008-04-28 08:58:19 -07:00

mprotect.c

Merge commit '85082fd7cbe3173198aac0eb5e85ab1edcc6352c' into test-build

2008-07-15 15:44:51 +10:00

mremap.c

sparse pointer use of zero as null

2007-10-18 14:37:31 -07:00

msync.c

Detach sched.h from mm.h

2007-05-21 09:18:19 -07:00

nommu.c

nommu: Correct kobjsize() page validity checks.

2008-06-12 07:56:17 -07:00

oom_kill.c

oom_kill: remove unused parameter in badness()

2008-04-28 08:58:26 -07:00

page_alloc.c

Merge branch 'generic-ipi' into generic-ipi-for-linus

2008-07-15 21:55:59 +02:00

page_io.c

mm: fix PageUptodate data race

2008-02-05 09:44:19 -08:00

page_isolation.c

memory hotremove: unset migrate type "ISOLATE" after removal

2007-11-14 18:45:38 -08:00

page-writeback.c

Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4

2008-07-15 08:36:38 -07:00

pagewalk.c

pagemap: pass mm into pagewalkers

2008-06-12 18:05:41 -07:00

pdflush.c

mm/pdflush.c: merge the same code in two path

2008-05-13 08:02:24 -07:00

prio_tree.c

spelling fixes: mm/

2007-10-20 01:27:18 +02:00

quicklist.c

quicklists: Only consider memory that can be used with GFP_KERNEL

2008-01-14 08:52:22 -08:00

readahead.c

mm: bdi: export BDI attributes in sysfs

2008-04-30 08:29:49 -07:00

rmap.c

mm: remove nopage

2008-04-28 08:58:18 -07:00

shmem_acl.c

…

shmem.c

mm: bdi: add separate writeback accounting capability

2008-04-30 08:29:50 -07:00

slab.c

Merge branch 'generic-ipi' into generic-ipi-for-linus

2008-07-15 21:55:59 +02:00

slob.c

slob: Fix to return wrong pointer

2008-05-19 20:55:25 +03:00

slub.c

slub: dump more data on slab corruption

2008-07-19 14:17:22 +03:00

sparse-vmemmap.c

Christoph has moved

2008-07-04 10:40:04 -07:00

sparse.c

revert "memory hotplug: allocate usemap on the section with pgdat"

2008-04-30 08:29:55 -07:00

swap_state.c

mm: bdi: add separate writeback accounting capability

2008-04-30 08:29:50 -07:00

swap.c

mm: fix atomic_t overflow in vm

2008-05-24 09:56:09 -07:00

swapfile.c

mm: use non-racy method for /proc/swaps creation

2008-04-29 08:06:20 -07:00

thrash.c

…

tiny-shmem.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6

2008-03-25 08:57:47 -07:00

truncate.c

fix invalidate_inode_pages2_range() to not clear ret

2008-04-28 08:58:18 -07:00

util.c

netfilter: fix double-free and use-after free

2008-07-26 17:49:33 -07:00

vmalloc.c

docbook: fix vmalloc missing parameter notation

2008-05-01 08:03:59 -07:00

vmscan.c

mm: fix incorrect variable type in do_try_to_free_pages()

2008-06-12 18:05:39 -07:00

vmstat.c

make vmstat cpu-unplug safe

2008-05-13 08:02:23 -07:00