Matthew Daley cb101ed2c3 x25: Handle undersized/fragmented skbs ...

There are multiple locations in the X.25 packet layer where a skb is
assumed to be of at least a certain size and that all its data is
currently available at skb->data.  These assumptions are not checked,
hence buffer overreads may occur.  Use pskb_may_pull to check these
minimal size assumptions and ensure that data is available at skb->data
when necessary, as well as use skb_copy_bits where needed.

Signed-off-by: Matthew Daley <mattjd@gmail.com>
Cc: Eric Dumazet <eric.dumazet@gmail.com>
Cc: Andrew Hendry <andrew.hendry@gmail.com>
Cc: stable <stable@kernel.org>
Acked-by: Andrew Hendry <andrew.hendry@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2011-10-17 19:31:39 -04:00

..

9p

net/9p: Fix kernel crash with msize 512K

2011-09-06 08:17:15 -05:00

802

snap: remove one synchronize_net()

2011-05-23 16:29:24 -04:00

8021q

vlan: reset headers on accel emulation path

2011-08-18 21:29:27 -07:00

appletalk

appletalk: Reduce switch/case indent

2011-07-01 16:11:15 -07:00

atm

atm: br2684: Fix oops due to skb->dev being NULL

2011-08-20 14:13:05 -07:00

ax25

…

batman-adv

batman-adv: do_bcast has to be true for broadcast packets only

2011-09-22 20:27:10 +02:00

bluetooth

Bluetooth: Fix timeout on scanning for the second time

2011-09-15 11:54:05 -03:00

bridge

bridge: leave carrier on for empty bridge

2011-10-06 15:26:50 -04:00

caif

caif: fix a potential NULL dereference

2011-09-16 17:40:34 -04:00

can

can bcm: fix incomplete tx_setup fix

2011-09-29 15:33:47 -04:00

ceph

Merge branch 'for-linus' of git://github.com/NewDreamNetwork/ceph-client

2011-09-29 19:58:58 -07:00

core

fib:fix BUG_ON in fib_nl_newrule when add new fib rule

2011-09-21 15:16:40 -04:00

dcb

dcbnl: unlock on an error path in dcbnl_cee_fill()

2011-07-08 09:01:14 -07:00

dccp

net: Compute protocol sequence numbers and fragment IDs using MD5.

2011-08-06 18:33:19 -07:00

decnet

atomic: use <linux/atomic.h>

2011-07-26 16:49:47 -07:00

dns_resolver

…

dsa

DSA: Enable cascading in multi-chip 6131 configuration

2011-06-29 05:53:49 -07:00

econet

af_econet: Use current logging styles and neatening

2011-07-03 20:05:16 -07:00

ethernet

net: don't clear IFF_XMIT_DST_RELEASE in ether_setup

2011-09-15 14:49:44 -04:00

ieee802154

ieee802154: free skb buffer if dev isn't running

2011-06-30 16:18:09 +04:00

ipv4

tcp: properly update lost_cnt_hint during shifting

2011-10-04 23:31:24 -04:00

ipv6

gro: refetch inet6_protos[] after pulling ext headers

2011-10-10 14:26:16 -04:00

ipx

…

irda

IRDA: Fix global type conflicts in net/irda/irsysctl.c v2

2011-09-16 19:17:09 -04:00

iucv

atomic: use <linux/atomic.h>

2011-07-26 16:49:47 -07:00

key

net: Remove casts of void *

2011-06-16 23:19:27 -04:00

l2tp

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2011-07-28 05:58:19 -07:00

lapb

lapb: Reduce switch/case indent

2011-07-01 16:11:16 -07:00

llc

…

mac80211

mac80211: fix missing sta_lock in __sta_info_destroy

2011-09-13 14:18:38 -04:00

netfilter

netfilter: Use proper rwlock init function

2011-10-05 17:51:38 -04:00

netlabel

net/netlabel/netlabel_kapi.c: add missing cleanup code

2011-08-11 05:52:57 -07:00

netlink

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6 into for-davem

2011-06-24 15:25:51 -04:00

netrom

netrom: Reduce switch/case indent

2011-07-01 16:11:16 -07:00

nfc

NFC: add the NFC socket raw protocol

2011-07-05 15:26:58 -04:00

packet

make PACKET_STATISTICS getsockopt report consistently between ring and non-ring

2011-10-03 14:18:26 -04:00

phonet

rtnetlink: Compute and store minimum ifinfo dump size

2011-06-09 20:38:07 -07:00

rds

RDSRDMA: Fix cleanup of rds_iw_mr_pool

2011-09-29 14:57:19 -04:00

rfkill

net: rfkill: add generic gpio rfkill driver

2011-05-19 13:53:54 -04:00

rose

rose: Delete commented out references to ancient firewalling code.

2011-07-07 02:41:59 -07:00

rxrpc

rxrpc: Fix set but unused variable 'usage' in rxrpc_get_transport()

2011-05-19 18:51:50 -04:00

sched

pkt_sched: cls_rsvp.h was outdated

2011-09-15 14:49:43 -04:00

sctp

sctp: deal with multiple COOKIE_ECHO chunks

2011-09-16 17:17:22 -04:00

sunrpc

net: fix new sunrpc kernel-doc warning

2011-07-28 18:20:21 -07:00

tipc

atomic: use <linux/atomic.h>

2011-07-26 16:49:47 -07:00

unix

new helpers: kern_path_create/user_path_create

2011-07-20 01:44:05 -04:00

wanrouter

…

wimax

…

wireless

cfg80211: Fix validation of AKM suites

2011-09-21 15:58:24 -04:00

x25

x25: Handle undersized/fragmented skbs

2011-10-17 19:31:39 -04:00

xfrm

net: check return value for dst_alloc

2011-09-27 15:32:06 -04:00

compat.c

…

Kconfig

NFC: add nfc subsystem core

2011-07-05 15:26:57 -04:00

Makefile

NFC: add nfc subsystem core

2011-07-05 15:26:57 -04:00

nonet.c

…

socket.c

sendmmsg/sendmsg: fix unsafe user pointer access

2011-08-24 19:45:03 -07:00

sysctl_net.c

…