Chas Williams 17b24b3c97 ATM: CVE-2008-5079: duplicate listen() on socket corrupts the vcc table ...

As reported by Hugo Dias that it is possible to cause a local denial
of service attack by calling the svc_listen function twice on the same
socket and reading /proc/net/atm/*vc

Signed-off-by: Chas Williams <chas@cmf.nrl.navy.mil>
Signed-off-by: David S. Miller <davem@davemloft.net>

2008-12-04 14:58:13 -08:00

..

addr.c

atm: use const where reasonable

2008-06-17 16:20:06 -07:00

addr.h

atm: use const where reasonable

2008-06-17 16:20:06 -07:00

atm_misc.c

…

atm_sysfs.c

[ATM]: Convert struct class_device to struct device

2008-01-28 15:00:12 -08:00

br2684.c

net: Use hton[sl]() instead of __constant_hton[sl]() where applicable

2008-09-20 22:20:49 -07:00

clip.c

netns: Use net_eq() to compare net-namespaces for optimization.

2008-07-19 22:34:43 -07:00

common.c

atm: use const where reasonable

2008-06-17 16:20:06 -07:00

common.h

[NET]: Make socket creation namespace safe.

2007-10-10 16:49:07 -07:00

ioctl.c

…

Kconfig

[ATM]: atm is no longer experimental

2008-01-28 15:00:11 -08:00

lec_arpc.h

…

lec.c

net/atm/lec.c: drop code after return

2008-09-22 19:24:45 -07:00

lec.h

atm: use const where reasonable

2008-06-17 16:20:06 -07:00

Makefile

…

mpc.c

atm: fix const assignment/discard warnings in the ATM networking driver

2008-07-30 16:31:46 -07:00

mpc.h

…

mpoa_caches.c

…

mpoa_caches.h

…

mpoa_proc.c

[ATM]: Use proc_create() to setup ->proc_fops first

2008-02-28 13:55:45 -08:00

pppoatm.c

[ATM]: Replace DPRINTK() with pr_debug().

2007-10-10 16:48:27 -07:00

proc.c

atm: assign PDE->data before gluing PDE into /proc tree

2008-05-02 04:08:30 -07:00

protocols.h

…

pvc.c

[NET]: Make socket creation namespace safe.

2007-10-10 16:49:07 -07:00

raw.c

[ATM]: Replace DPRINTK() with pr_debug().

2007-10-10 16:48:27 -07:00

resources.c

[ATM]: Use SEQ_START_TOKEN

2008-04-10 03:33:03 -07:00

resources.h

…

signaling.c

[NET]: sparse warning fixes

2007-10-10 16:54:48 -07:00

signaling.h

…

svc.c

ATM: CVE-2008-5079: duplicate listen() on socket corrupts the vcc table

2008-12-04 14:58:13 -08:00