Dan Carpenter fcdba992c2 netfilter: ipset: small potential read beyond the end of buffer ...

commit 2196937e12 upstream.

We could be reading 8 bytes into a 4 byte buffer here.  It seems
harmless but adding a check is the right thing to do and it silences a
static checker warning.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2015-01-27 07:52:33 -08:00

..

9p

9p/trans_virtio.c: Fix broken zero-copy on vmalloc() buffers

2014-03-06 21:30:03 -08:00

802

…

8021q

8021q: fix a potential memory leak

2014-07-28 08:00:04 -07:00

appletalk

appletalk: Fix socket referencing in skb

2014-07-28 08:00:05 -07:00

atm

net: rework recvmsg handler msg_name and msg_namelen logic

2013-12-08 07:29:25 -08:00

ax25

net: rework recvmsg handler msg_name and msg_namelen logic

2013-12-08 07:29:25 -08:00

batman-adv

batman-adv: set up network coding packet handlers during module init

2013-11-20 12:27:47 -08:00

bluetooth

Bluetooth: Avoid use of session socket after the session gets freed

2014-09-17 09:04:00 -07:00

bridge

br: fix use of ->rx_handler_data in code executed on non-rx_handler path

2014-11-21 09:22:54 -08:00

caif

net: rework recvmsg handler msg_name and msg_namelen logic

2013-12-08 07:29:25 -08:00

can

net: Use netlink_ns_capable to verify the permisions of netlink messages

2014-06-26 15:12:37 -04:00

ceph

libceph: do not crash on large auth tickets

2014-11-21 09:22:53 -08:00

core

rtnetlink: release net refcnt on error in do_setlink()

2014-12-16 09:09:42 -08:00

dcb

net: Use netlink_ns_capable to verify the permisions of netlink messages

2014-06-26 15:12:37 -04:00

dccp

net:dccp: do not report ICMP redirects to user space

2013-10-13 16:08:30 -07:00

decnet

net: Use netlink_ns_capable to verify the permisions of netlink messages

2014-06-26 15:12:37 -04:00

dns_resolver

dns_resolver: Null-terminate the right string

2014-07-28 08:00:06 -07:00

dsa

…

ethernet

…

ieee802154

6lowpan: fix lockdep splats

2014-03-06 21:30:02 -08:00

ipv4

tcp: Do not apply TSO segment limit to non-TSO packets

2015-01-27 07:52:31 -08:00

ipv6

ipv6: gre: fix wrong skb->protocol in WCCP

2014-12-16 09:09:42 -08:00

ipx

ipx: fix locking regression in ipx_sendmsg and ipx_recvmsg

2014-12-06 15:05:47 -08:00

irda

net: rework recvmsg handler msg_name and msg_namelen logic

2013-12-08 07:29:25 -08:00

iucv

af_iucv: wrong mapping of sent and confirmed skbs

2014-06-30 20:09:40 -07:00

key

net: rework recvmsg handler msg_name and msg_namelen logic

2013-12-08 07:29:25 -08:00

l2tp

l2tp: fix race while getting PMTU on PPP pseudo-wire

2014-10-15 08:31:57 +02:00

lapb

…

llc

net: llc: fix use after free in llc_ui_recvmsg

2014-01-15 15:28:50 -08:00

mac80211

mac80211: free management frame keys when removing station

2015-01-08 09:58:16 -08:00

mac802154

…

netfilter

netfilter: ipset: small potential read beyond the end of buffer

2015-01-27 07:52:33 -08:00

netlabel

…

netlink

netlink: Don't reorder loads/stores before marking mmap netlink frame as available

2015-01-27 07:52:30 -08:00

netrom

net: rework recvmsg handler msg_name and msg_namelen logic

2013-12-08 07:29:25 -08:00

nfc

net: rework recvmsg handler msg_name and msg_namelen logic

2013-12-08 07:29:25 -08:00

openvswitch

openvswitch: fix panic with multiple vlan headers

2014-10-15 08:31:57 +02:00

packet

packet: handle too big packets for PACKET_V3

2014-10-15 08:31:56 +02:00

phonet

net: Use netlink_ns_capable to verify the permisions of netlink messages

2014-06-26 15:12:37 -04:00

rds

rds: prevent dereference of a NULL device in rds_iw_laddr_check

2014-04-14 06:42:18 -07:00

rfkill

…

rose

net: rose: restore old recvmsg behavior

2014-01-15 15:28:49 -08:00

rxrpc

net: rework recvmsg handler msg_name and msg_namelen logic

2013-12-08 07:29:25 -08:00

sched

net: Use netlink_ns_capable to verify the permisions of netlink messages

2014-06-26 15:12:37 -04:00

sctp

net: sctp: use MAX_HEADER for headroom reserve in output path

2014-12-16 09:09:43 -08:00

sunrpc

svcrdma: Select NFSv4.1 backchannel transport based on forward channel

2014-09-05 16:28:37 -07:00

tipc

tipc: clear 'next'-pointer of message fragments before reassembly

2014-07-28 08:00:05 -07:00

unix

net: unix: non blocking recvmsg() should not return -EINTR

2014-04-14 06:42:15 -07:00

vmw_vsock

net: rework recvmsg handler msg_name and msg_namelen logic

2013-12-08 07:29:25 -08:00

wimax

…

wireless

cfg80211: Fix 160 MHz channels with 80+80 and 160 MHz drivers

2015-01-27 07:52:31 -08:00

x25

net: rework recvmsg handler msg_name and msg_namelen logic

2013-12-08 07:29:25 -08:00

xfrm

net: Use netlink_ns_capable to verify the permisions of netlink messages

2014-06-26 15:12:37 -04:00

compat.c

net: sendmsg: fix NULL pointer dereference

2014-08-14 09:24:15 +08:00

Kconfig

…

Makefile

…

nonet.c

…

socket.c

net: socket: error on a negative msg_namelen

2014-04-14 06:42:16 -07:00

sysctl_net.c

net: Update the sysctl permissions handler to test effective uid/gid

2013-10-13 16:08:34 -07:00