Eric Dumazet ebf6c9cb23 ipv6: tcp: add a missing tcp_v6_restore_cb() ...

Dmitry reported use-after-free in ip6_datagram_recv_specific_ctl()

A similar bug was fixed in commit 8ce48623f0 ("ipv6: tcp: restore
IP6CB for pktoptions skbs"), but I missed another spot.

tcp_v6_syn_recv_sock() can indeed set np->pktoptions from ireq->pktopts

Fixes: 971f10eca1 ("tcp: better TCP_SKB_CB layout to reduce cache line misses")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2017-02-06 10:52:45 -05:00

..

ila

net: Specify the owning module for lwtunnel ops

2017-01-24 16:21:36 -05:00

netfilter

netfilter: rpfilter: fix incorrect loopback packet judgment

2017-01-16 14:23:01 +01:00

addrconf_core.c

…

addrconf.c

ipv6: addrconf: Avoid addrconf_disable_change() using RCU read-side lock

2017-01-19 11:08:53 -05:00

addrlabel.c

…

af_inet6.c

Replace <asm/uaccess.h> with <linux/uaccess.h> globally

2016-12-24 11:46:01 -08:00

ah6.c

net: inet: Support UID-based routing in IP protocols.

2016-11-04 14:45:23 -04:00

anycast.c

…

calipso.c

calipso: fix resource leak on calipso_genopt failure

2016-08-13 14:56:17 -07:00

datagram.c

Replace <asm/uaccess.h> with <linux/uaccess.h> globally

2016-12-24 11:46:01 -08:00

esp6.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2016-12-03 12:29:53 -05:00

exthdrs_core.c

ipv6: constify the skb pointer of ipv6_find_tlv().

2016-06-27 15:06:15 -04:00

exthdrs_offload.c

…

exthdrs.c

ipv6: sr: remove cleanup flag and fix HMAC computation

2017-02-03 11:05:23 -05:00

fib6_rules.c

net: flow: Add l3mdev flow update

2016-09-10 23:12:51 -07:00

fou6.c

fou: add Kconfig options for IPv6 support

2016-05-29 22:24:21 -07:00

icmp.c

Replace <asm/uaccess.h> with <linux/uaccess.h> globally

2016-12-24 11:46:01 -08:00

inet6_connection_sock.c

tcp: don't annotate mark on control socket from tcp_v6_send_response()

2017-01-27 10:33:56 -05:00

inet6_hashtables.c

inet: Fix missing return value in inet6_hash

2016-10-29 12:01:49 -04:00

ip6_checksum.c

ipv6: fix checksum annotation in udp6_csum_init

2016-06-14 15:26:42 -04:00

ip6_fib.c

ipv6: report NLM_F_CREATE and NLM_F_EXCL flags in RTM_NEWROUTE events

2016-09-09 16:50:23 -07:00

ip6_flowlabel.c

Replace <asm/uaccess.h> with <linux/uaccess.h> globally

2016-12-24 11:46:01 -08:00

ip6_gre.c

ip6_gre: fix ip6gre_err() invalid reads

2017-02-05 17:23:04 -05:00

ip6_icmp.c

ipv6: icmp: add a force_saddr param to icmp6_send()

2016-06-18 22:11:38 -07:00

ip6_input.c

net: vrf: ipv6 support for local traffic to local addresses

2016-06-08 00:25:38 -07:00

ip6_offload.c

gro: Disable frag0 optimization on IPv6 ext headers

2017-01-10 21:30:33 -05:00

ip6_offload.h

udp: Add GRO functions to UDP socket

2016-04-07 16:53:29 -04:00

ip6_output.c

ipv6: Paritially checksum full MTU frames

2017-01-30 15:51:12 -05:00

ip6_tunnel.c

ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim()

2017-02-01 12:27:33 -05:00

ip6_udp_tunnel.c

ip6_udp_tunnel: remove unused IPCB related codes

2016-11-02 15:18:36 -04:00

ip6_vti.c

vti6: fix device register to report IFLA_INFO_KIND

2017-01-06 16:09:09 -05:00

ip6mr.c

Replace <asm/uaccess.h> with <linux/uaccess.h> globally

2016-12-24 11:46:01 -08:00

ipcomp6.c

net: inet: Support UID-based routing in IP protocols.

2016-11-04 14:45:23 -04:00

ipv6_sockglue.c

Replace <asm/uaccess.h> with <linux/uaccess.h> globally

2016-12-24 11:46:01 -08:00

Kconfig

ipv6: sr: add option to control lwtunnel support

2016-11-16 11:29:46 -05:00

Makefile

ipv6: sr: add option to control lwtunnel support

2016-11-16 11:29:46 -05:00

mcast_snoop.c

…

mcast.c

mld: do not remove mld souce list info when set link down

2017-01-16 12:44:59 -05:00

mip6.c

ktime: Get rid of ktime_equal()

2016-12-25 17:21:23 +01:00

ndisc.c

ipv6 addrconf: Implemented enhanced DAD (RFC7527)

2016-12-03 23:21:37 -05:00

netfilter.c

net: inet: Support UID-based routing in IP protocols.

2016-11-04 14:45:23 -04:00

output_core.c

ipv6: Set skb->protocol properly for local output

2016-12-02 12:34:22 -05:00

ping.c

net: inet: Support UID-based routing in IP protocols.

2016-11-04 14:45:23 -04:00

proc.c

proc: Reduce cache miss in snmp6_seq_show

2016-09-30 01:50:44 -04:00

protocol.c

…

raw.c

ipv6: handle -EFAULT from skb_copy_bits

2016-12-23 12:20:39 -05:00

reassembly.c

ipv6: on reassembly, record frag_max_size

2016-11-03 15:41:11 -04:00

route.c

lwtunnel: fix autoload of lwt modules

2017-01-18 17:07:14 -05:00

seg6_hmac.c

ipv6: sr: remove cleanup flag and fix HMAC computation

2017-02-03 11:05:23 -05:00

seg6_iptunnel.c

net: Specify the owning module for lwtunnel ops

2017-01-24 16:21:36 -05:00

seg6.c

ipv6: seg6_genl_set_tunsrc() must check kmemdup() return value

2017-01-20 11:07:48 -05:00

sit.c

Replace <asm/uaccess.h> with <linux/uaccess.h> globally

2016-12-24 11:46:01 -08:00

syncookies.c

tcp: randomize tcp timestamp offsets for each connection

2016-12-02 12:49:59 -05:00

sysctl_net_ipv6.c

calipso: Add a label cache.

2016-06-27 15:06:17 -04:00

tcp_ipv6.c

ipv6: tcp: add a missing tcp_v6_restore_cb()

2017-02-06 10:52:45 -05:00

tcpv6_offload.c

…

tunnel6.c

…

udp_impl.h

udplite: call proper backlog handlers

2016-11-24 15:32:14 -05:00

udp_offload.c

gso: Remove arbitrary checks for unsupported GSO

2016-05-20 18:03:15 -04:00

udp.c

Replace <asm/uaccess.h> with <linux/uaccess.h> globally

2016-12-24 11:46:01 -08:00

udplite.c

udplite: call proper backlog handlers

2016-11-24 15:32:14 -05:00

xfrm6_input.c

vti6: fix input path

2016-09-21 10:09:14 +02:00

xfrm6_mode_beet.c

…

xfrm6_mode_ro.c

…

xfrm6_mode_transport.c

…

xfrm6_mode_tunnel.c

…

xfrm6_output.c

…

xfrm6_policy.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2016-09-12 15:52:44 -07:00

xfrm6_protocol.c

…

xfrm6_state.c

…

xfrm6_tunnel.c

netns: make struct pernet_operations::id unsigned int

2016-11-18 10:59:15 -05:00