Mohamed Ghannam 69c64866ce dccp: CVE-2017-8824: use-after-free in DCCP code ...

Whenever the sock object is in DCCP_CLOSED state,
dccp_disconnect() must free dccps_hc_tx_ccid and
dccps_hc_rx_ccid and set to NULL.

Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2017-12-05 18:08:53 -05:00

..

ccids

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-11-04 09:26:51 +09:00

ackvec.c

dccp: drop null test before destroy functions

2015-09-15 16:49:43 -07:00

ackvec.h

…

ccid.c

dccp: drop null test before destroy functions

2015-09-15 16:49:43 -07:00

ccid.h

…

dccp.h

net: snmp: kill STATS_BH macros

2016-04-27 22:48:25 -04:00

diag.c

sock_diag: specify info_size per inet protocol

2015-06-15 19:49:22 -07:00

feat.c

dccp: fix a memleak for dccp_feat_init err process

2017-07-27 00:01:05 -07:00

feat.h

…

input.c

net: dccp: mark expected switch fall-throughs

2017-10-16 21:15:21 +01:00

ipv4.c

tcp/dccp: fix other lockdep splats accessing ireq_opt

2017-10-26 17:41:32 +09:00

ipv6.c

net: dccp: Add handling of IPV6_PKTOPTIONS to dccp_v6_do_rcv()

2017-08-31 11:43:47 -07:00

ipv6.h

…

Kconfig

…

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

minisocks.c

tcp/dccp: block bh before arming time_wait timer

2017-12-01 15:07:43 -05:00

options.c

net: dccp: mark expected switch fall-throughs

2017-10-16 21:15:21 +01:00

output.c

sched/headers: Prepare to move signal wakeup & sigpending methods from <linux/sched.h> into <linux/sched/signal.h>

2017-03-02 08:42:32 +01:00

probe.c

Use 64-bit timekeeping

2015-11-01 17:01:16 -05:00

proto.c

dccp: CVE-2017-8824: use-after-free in DCCP code

2017-12-05 18:08:53 -05:00

qpolicy.c

…

sysctl.c

…

timer.c

net: dccp: Convert timers to use timer_setup()

2017-10-25 12:59:19 +09:00