Jason Wang 666a76c79f net: flow_dissector: fail on evil iph->ihl ...

[ Upstream commit 6f09234385 ]

We don't validate iph->ihl which may lead a dead loop if we meet a IPIP
skb whose iph->ihl is zero. Fix this by failing immediately when iph->ihl
is evil (less than 5).

This issue were introduced by commit ec5efe7946
(rps: support IPIP encapsulation).

Signed-off-by: Jason Wang <jasowang@redhat.com>
Cc: Eric Dumazet <edumazet@google.com>
Cc: Petr Matousek <pmatouse@redhat.com>
Cc: Michael S. Tsirkin <mst@redhat.com>
Cc: Daniel Borkmann <dborkman@redhat.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2013-11-20 12:27:46 -08:00

..

datagram.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2013-04-30 03:55:20 -04:00

dev_addr_lists.c

net/core: dev_mc_sync_multiple calls wrong helper

2013-05-31 16:56:56 -07:00

dev_ioctl.c

net: fix kernel deadlock with interface rename and netdev name retrieval.

2013-06-26 13:42:54 -07:00

dev.c

vlan: mask vlan prio bits

2013-07-28 16:30:05 -07:00

drop_monitor.c

drop_monitor: dont sleep in atomic context

2012-06-04 11:42:01 -04:00

dst.c

net: add skb_dst_set_noref_force

2013-04-02 00:22:53 +02:00

ethtool.c

vlan: restore ethtool ABI to control VLAN hardware acceleration

2013-06-17 17:09:35 -07:00

fib_rules.c

rtnetlink: Remove passing of attributes into rtnl_doit functions

2013-03-22 10:31:16 -04:00

filter.c

sock_diag: fix filter code sent to userspace

2013-06-10 22:23:32 -07:00

flow_dissector.c

net: flow_dissector: fail on evil iph->ihl

2013-11-20 12:27:46 -08:00

flow.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2013-04-01 13:36:50 -04:00

gen_estimator.c

…

gen_stats.c

…

iovec.c

Hoist memcpy_fromiovec/memcpy_toiovec into lib/

2013-05-20 10:24:22 +09:30

link_watch.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2012-10-02 13:38:27 -07:00

Makefile

net: move procfs code to net/core/net-procfs.c

2013-02-19 00:51:10 -05:00

neighbour.c

neighbour: populate neigh_parms on alloc before calling ndo_neigh_setup

2013-09-14 06:54:54 -07:00

net_namespace.c

proc: Split the namespace stuff out into linux/proc_ns.h

2013-05-01 17:29:39 -04:00

net-procfs.c

net: Print functions in /proc/net/ptype without the offset.

2013-03-25 14:12:55 -04:00

net-sysfs.c

rps_dev_flow_table_release(): no need to delay vfree()

2013-05-06 11:06:51 -04:00

net-sysfs.h

…

net-traces.c

…

netevent.c

…

netpoll.c

netpoll: fix NULL pointer dereference in netpoll_cleanup

2013-10-13 16:08:29 -07:00

netprio_cgroup.c

Revert "netprio_cgroup: make local table static"

2013-04-12 03:06:44 -04:00

pktgen.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-05-01 17:51:54 -07:00

request_sock.c

tcp: fix a panic on UP machines in reqsk_fastopen_remove

2013-01-14 18:10:05 -05:00

rtnetlink.c

rtnetlink: rtnl_bridge_getlink: Call nlmsg_find_attr() with ifinfomsg header

2013-09-14 06:54:55 -07:00

scm.c

net: Check the correct namespace when spoofing pid over SCM_RIGHTS

2013-09-26 17:18:05 -07:00

secure_seq.c

net: secure_seq: Fix warning when CONFIG_IPV6 and CONFIG_INET are not selected

2013-11-04 04:31:01 -08:00

skbuff.c

gre: fix a possible skb leak

2013-06-25 16:07:44 -07:00

sock_diag.c

sock_diag: fix filter code sent to userspace

2013-06-10 22:23:32 -07:00

sock.c

tcp: TSO packets automatic sizing

2013-11-04 04:30:59 -08:00

stream.c

…

sysctl_net_core.c

net: check net.core.somaxconn sysctl values

2013-09-14 06:54:54 -07:00

timestamping.c

…

user_dma.c

…

utils.c

net: core: let's use native isxdigit instead of custom

2013-03-27 12:48:32 -04:00