Eric Dumazet af67433576 bridge: fix a possible use after free ...

[ Upstream commit 22df13319d ]

br_multicast_ipv6_rcv() can call pskb_trim_rcsum() and therefore skb
head can be reallocated.

Cache icmp6_type field instead of dereferencing twice the struct
icmp6hdr pointer.

Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2011-10-03 11:40:56 -07:00

..

9p

net/9p: Fix kernel crash with msize 512K

2011-10-03 11:40:22 -07:00

802

snap: remove one synchronize_net()

2011-05-23 16:29:24 -04:00

8021q

vlan: reset headers on accel emulation path

2011-10-03 11:40:55 -07:00

appletalk

…

atm

atm: br2684: Fix oops due to skb->dev being NULL

2011-10-03 11:39:57 -07:00

ax25

…

batman-adv

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6

2011-05-20 13:43:21 -07:00

bluetooth

net: Audit drivers to identify those needing IFF_TX_SKB_SHARING cleared

2011-08-15 18:31:38 -07:00

bridge

bridge: fix a possible use after free

2011-10-03 11:40:56 -07:00

caif

caif: Bugfix - XOFF removed channel from caif-mux

2011-06-16 23:59:09 -04:00

can

can: convert to %pK for kptr_restrict support

2011-05-26 14:23:35 -04:00

ceph

ceph: fix file mode calculation

2011-07-19 11:25:04 -07:00

core

scm: Capture the full credentials of the scm sender

2011-10-03 11:40:54 -07:00

dcb

…

dccp

net: Compute protocol sequence numbers and fragment IDs using MD5.

2011-08-15 18:31:35 -07:00

decnet

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6

2011-05-20 13:43:21 -07:00

dns_resolver

…

dsa

Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6

2011-05-05 14:59:02 -07:00

econet

…

ethernet

net: add IFF_SKB_TX_SHARED flag to priv_flags

2011-08-15 18:31:38 -07:00

ieee802154

ieee802154: Don't leak memory in ieee802154_nl_fill_phy

2011-06-13 18:03:22 -04:00

ipv4

tcp: initialize variable ecn_ok in syncookies path

2011-10-03 11:40:54 -07:00

ipv6

tcp: initialize variable ecn_ok in syncookies path

2011-10-03 11:40:54 -07:00

ipx

…

irda

irda: iriap: Use seperate lockdep class for irias_objects->hb_spinlock

2011-06-06 17:00:35 -07:00

iucv

[S390] irq: merge irq.c and s390_ext.c

2011-05-26 09:48:24 +02:00

key

net: convert %p usage to %pK

2011-05-24 01:13:12 -04:00

l2tp

net: Audit drivers to identify those needing IFF_TX_SKB_SHARING cleared

2011-08-15 18:31:38 -07:00

lapb

…

llc

…

mac80211

mac80211: fix missing sta_lock in __sta_info_destroy

2011-10-03 11:40:28 -07:00

netfilter

IPVS: Free resources on module removal

2011-08-15 18:31:37 -07:00

netlabel

Remove prefetch() from <linux/skbuff.h> and "netlabel_addrlist.h"

2011-05-22 21:43:41 -07:00

netlink

net: convert %p usage to %pK

2011-05-24 01:13:12 -04:00

netrom

…

packet

af_packet: prevent information leak

2011-06-06 22:42:06 -07:00

phonet

net: convert %p usage to %pK

2011-05-24 01:13:12 -04:00

rds

RDMA/cma: Pass QP type into rdma_create_id()

2011-05-25 13:46:23 -07:00

rfkill

net: rfkill: add generic gpio rfkill driver

2011-05-19 13:53:54 -04:00

rose

…

rxrpc

rxrpc: Fix set but unused variable 'usage' in rxrpc_get_transport()

2011-05-19 18:51:50 -04:00

sched

net_sched: prio: use qdisc_dequeue_peeked

2011-10-03 11:40:53 -07:00

sctp

net: sctp: fix checksum marking for outgoing packets

2011-07-14 15:16:31 -07:00

sunrpc

svcrpc: fix list-corrupting race on nfsd shutdown

2011-08-04 21:58:40 -07:00

tipc

tipc: Revise timings used when sending link request messages

2011-05-10 16:04:02 -04:00

unix

net: convert %p usage to %pK

2011-05-24 01:13:12 -04:00

wanrouter

…

wimax

…

wireless

wireless: Reset beacon_found while updating regulatory

2011-10-03 11:40:40 -07:00

x25

…

xfrm

xfrm: Perform a replay check after return from async codepaths

2011-10-03 11:40:55 -07:00

compat.c

net: Add sendmmsg socket system call

2011-05-05 11:10:14 -07:00

Kconfig

bpf: depends on MODULES

2011-04-29 10:20:53 -07:00

Makefile

…

nonet.c

…

socket.c

sendmmsg/sendmsg: fix unsafe user pointer access

2011-10-03 11:39:54 -07:00

sysctl_net.c

…

TUNABLE

…