Matthew Daley 4ea7f3aa5d x25: Prevent skb overreads when checking call user data ...

commit 7f81e25bef upstream.

x25_find_listener does not check that the amount of call user data given
in the skb is big enough in per-socket comparisons, hence buffer
overreads may occur.  Fix this by adding a check.

Signed-off-by: Matthew Daley <mattjd@gmail.com>
Cc: Eric Dumazet <eric.dumazet@gmail.com>
Cc: Andrew Hendry <andrew.hendry@gmail.com>
Acked-by: Andrew Hendry <andrew.hendry@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2011-10-25 07:10:17 +02:00

..

af_x25.c

x25: Prevent skb overreads when checking call user data

2011-10-25 07:10:17 +02:00

Kconfig

x25: remove the BKL

2011-03-05 10:55:45 +01:00

Makefile

…

sysctl_net_x25.c

sysctl net: Remove unused binary sysctl code

2009-11-12 02:05:06 -08:00

x25_dev.c

X25: Add if_x25.h and x25 to device identifiers

2010-04-22 16:12:36 -07:00

x25_facilities.c

Fix common misspellings

2011-03-31 11:26:23 -03:00

x25_forward.c

Fix common misspellings

2011-03-31 11:26:23 -03:00

x25_in.c

x25: possible skb leak on bad facilities

2011-02-07 13:41:38 -08:00

x25_link.c

x25: Do not reference freed memory.

2011-02-09 22:36:13 -08:00

x25_out.c

x25: remove the BKL

2011-03-05 10:55:45 +01:00

x25_proc.c

net: x25: use seq_list_foo() helpers

2010-02-10 11:12:10 -08:00

x25_route.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

x25_subr.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

x25_timer.c

x25: Fix sleep from timer on socket destroy.

2009-06-16 05:40:30 -07:00