apfs/linux-apfs
0
0
Fork 0
mirror of https://github.com/linux-apfs/linux-apfs.git synced 2026-05-01 15:00:59 -07:00
Code Issues Packages Projects Releases Wiki Activity
Files
e466af75c074e76107ae1cd5a2823e9c61894ffb
linux-apfs/net
T
History
Eric Dumazet e466af75c0 netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user 
syzkaller reports an out of bound read in strlcpy(), triggered
by xt_copy_counters_from_user()

Fix this by using memcpy(), then forcing a zero byte at the last position
of the destination, as Florian did for the non COMPAT code.

Fixes: d7591f0c41 ("netfilter: x_tables: introduce and use xt_copy_counters_from_user")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Willem de Bruijn <willemb@google.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2017-10-06 15:04:05 +02:00
..
6lowpan
…
9p
…
802
…
8021q
…
appletalk
…
atm
…
ax25
…
batman-adv
…
bluetooth
…
bpf
…
bridge
netfilter: ebtables: fix race condition in frame_filter_net_init()
2017-09-29 13:36:06 +02:00
caif
…
can
…
ceph
libceph: don't allow bidirectional swap of pg-upmap-items
2017-09-19 20:34:29 +02:00
core
net: orphan frags on stand-alone ptype in dev_queue_xmit_nit
2017-09-22 20:31:29 -07:00
dcb
…
dccp
…
decnet
…
dns_resolver
…
dsa
…
ethernet
…
hsr
…
ieee802154
…
ife
…
ipv4
inet: fix improper empty comparison
2017-09-22 20:33:17 -07:00
ipv6
ipv6: fix net.ipv6.conf.all interface DAD handlers
2017-09-19 16:44:02 -07:00
ipx
…
iucv
…
kcm
…
key
…
l2tp
l2tp: fix race between l2tp_session_delete() and l2tp_tunnel_closeall()
2017-09-25 14:44:41 -07:00
l3mdev
…
lapb
…
llc
…
mac80211
…
mac802154
…
mpls
…
ncsi
…
netfilter
netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
2017-10-06 15:04:05 +02:00
netlabel
…
netlink
…
netrom
…
nfc
…
nsh
…
openvswitch
openvswitch: Fix an error handling path in 'ovs_nla_init_match_and_action()'
2017-09-12 20:37:31 -07:00
packet
packet: hold bind lock when rebinding to fanout hook
2017-09-20 13:57:19 -07:00
phonet
…
psample
…
qrtr
…
rds
…
rfkill
…
rose
…
rxrpc
…
sched
net_sched: remove cls_flower idr on failure
2017-09-21 15:13:52 -07:00
sctp
sctp: do not mark sk dumped when inet_sctp_diag_fill returns err
2017-09-15 14:51:15 -07:00
smc
net/smc: no close wait in case of process shut down
2017-09-21 15:31:03 -07:00
strparser
…
sunrpc
…
switchdev
…
tipc
…
tls
tls: make tls_sw_free_resources static
2017-09-14 09:55:21 -07:00
unix
…
vmw_vsock
…
wimax
…
wireless
nl80211: fix null-ptr dereference on invalid mesh configuration
2017-09-18 22:51:07 +02:00
x25
…
xfrm
…
compat.c
net: compat: assert the size of cmsg copied in is as expected
2017-09-20 15:36:18 -07:00
Kconfig
…
Makefile
…
socket.c
…
sysctl_net.c
…