Patrick McHardy 15db34702c [NETFILTER]: Fix crash in ip_nat_pptp ...

When an inbound PPTP_IN_CALL_REQUEST packet is received the
PPTP NAT helper uses a NULL pointer in pointer arithmentic to
calculate the offset in the packet which needs to be mangled
and corrupts random memory or crashes.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2006-01-10 12:54:30 -08:00

..

arp_tables.c

[NETFILTER] ip_tables: NUMA-aware allocation

2006-01-03 13:10:29 -08:00

arpt_mangle.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

arptable_filter.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ip_conntrack_amanda.c

[NETFILTER]: Fix module_param types and permissions

2006-01-05 12:19:46 -08:00

ip_conntrack_core.c

[NETFILTER]: Fix ip_conntrack_flush abuse in ctnetlink

2005-12-05 13:33:50 -08:00

ip_conntrack_ftp.c

[NETFILTER]: Fix module_param types and permissions

2006-01-05 12:19:46 -08:00

ip_conntrack_helper_pptp.c

[NETFILTER] PPTP helper: Fix compilation of conntrack helper without NAT

2005-11-04 23:02:53 -02:00

ip_conntrack_irc.c

[NETFILTER]: Fix module_param types and permissions

2006-01-05 12:19:46 -08:00

ip_conntrack_netbios_ns.c

[NETFILTER]: Fix module_param types and permissions

2006-01-05 12:19:46 -08:00

ip_conntrack_netlink.c

[NETFILTER]: ctnetlink: Fix dumping of helper name

2006-01-05 12:20:02 -08:00

ip_conntrack_proto_generic.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ip_conntrack_proto_gre.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ip_conntrack_proto_icmp.c

[NETFILTER]: ctnetlink: Add sanity checkings for ICMP

2006-01-05 12:17:03 -08:00

ip_conntrack_proto_sctp.c

[NETFILTER]: ip_conntrack_proto_sctp.c needs linux/interrupt.h

2006-01-07 12:57:41 -08:00

ip_conntrack_proto_tcp.c

spelling: s/trough/through/

2006-01-10 00:13:33 +01:00

ip_conntrack_proto_udp.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ip_conntrack_standalone.c

[NETFILTER]: Call POST_ROUTING hook before fragmentation

2006-01-05 12:20:59 -08:00

ip_conntrack_tftp.c

[NETFILTER] ip_conntrack: fix ftp/irc/tftp helpers on ports >= 32768

2005-11-17 15:06:47 -08:00

ip_nat_amanda.c

[NETFILTER]: ip_conntrack_expect_related must not free expectation

2005-07-21 13:14:46 -07:00

ip_nat_core.c

[NETFILTER] ipv4: small cleanups

2005-11-29 16:28:18 -08:00

ip_nat_ftp.c

kbuild: un-stringnify KBUILD_MODNAME

2006-01-06 21:17:50 +01:00

ip_nat_helper_pptp.c

[NETFILTER]: Fix crash in ip_nat_pptp

2006-01-10 12:54:30 -08:00

ip_nat_helper.c

[NETFILTER]: Fix invalid module autoloading by splitting iptable_nat

2005-09-26 15:25:11 -07:00

ip_nat_irc.c

kbuild: un-stringnify KBUILD_MODNAME

2006-01-06 21:17:50 +01:00

ip_nat_proto_gre.c

[NETFILTER] PPTP helper: Fix endianness bug in GRE key / CallID NAT

2005-11-04 23:19:17 -02:00

ip_nat_proto_icmp.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ip_nat_proto_tcp.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ip_nat_proto_udp.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ip_nat_proto_unknown.c

[NETFILTER] NAT: Fix module refcount dropping too far

2005-11-05 01:23:34 -02:00

ip_nat_rule.c

[NETFILTER]: Handle NAT module load race

2005-09-06 15:09:43 -07:00

ip_nat_snmp_basic.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ip_nat_standalone.c

[NETFILTER]: Handle NAT in IPsec policy checks

2006-01-07 12:57:37 -08:00

ip_nat_tftp.c

[NETFILTER]: ip_nat_tftp: Fix expectation NAT

2005-12-12 15:02:48 -08:00

ip_queue.c

[NET]: Fix packet timestamping.

2005-10-03 13:57:23 -07:00

ip_tables.c

[NETFILTER] ip_tables: NUMA-aware allocation

2006-01-03 13:10:29 -08:00

ipt_addrtype.c

[PATCH] Typo fix: dot after newline in printk strings

2005-10-30 17:37:20 -08:00

ipt_ah.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_CLASSIFY.c

[NETFILTER]: reduce netfilter sk_buff enlargement

2005-08-29 15:31:04 -07:00

ipt_CLUSTERIP.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_comment.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_connbytes.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_connmark.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_CONNMARK.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_conntrack.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_dccp.c

[NETFILTER]: New iptables DCCP protocol header match

2005-08-29 15:54:28 -07:00

ipt_dscp.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_DSCP.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ipt_ecn.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_ECN.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ipt_esp.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_hashlimit.c

[NET]: use __read_mostly on kmem_cache_t , DEFINE_SNMP_STAT pointers

2005-08-29 16:11:18 -07:00

ipt_helper.c

[NETFILTER]: ipt_helper.c needs linux/interrupt.h

2006-01-06 13:15:11 -08:00

ipt_iprange.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_length.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_limit.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_LOG.c

[NETFILTER] ipv4: small cleanups

2005-11-29 16:28:18 -08:00

ipt_mac.c

[NET]: Change memcmp(,,ETH_ALEN) to compare_ether_addr()

2006-01-10 12:54:28 -08:00

ipt_mark.c

[NETFILTER]: convert nfmark and conntrack mark to 32bit

2005-08-29 15:29:31 -07:00

ipt_MARK.c

[NETFILTER]: reduce netfilter sk_buff enlargement

2005-08-29 15:31:04 -07:00

ipt_MASQUERADE.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ipt_multiport.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_NETMAP.c

[NETFILTER]: Make NETMAP target usable in OUTPUT

2005-08-29 15:58:41 -07:00

ipt_NFQUEUE.c

[NETFILTER]: Add "nfnetlink_queue" netfilter queue handler over nfnetlink

2005-08-29 15:36:56 -07:00

ipt_NOTRACK.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_owner.c

[PATCH] files: lock-free fd look-up

2005-09-09 13:57:55 -07:00

ipt_physdev.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ipt_pkttype.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_policy.c

[NETFILTER]: Add ipt_policy/ip6t_policy matches

2006-01-07 12:57:38 -08:00

ipt_realm.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_recent.c

[NETFILTER]: Fix module_param types and permissions

2006-01-05 12:19:46 -08:00

ipt_REDIRECT.c

[IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnl

2005-10-03 14:35:55 -07:00

ipt_REJECT.c

[NETFILTER]: Use HOPLIMIT metric as TTL of TCP reset sent by REJECT

2006-01-05 12:28:57 -08:00

ipt_SAME.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_sctp.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_state.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_string.c

[NETFILTER]: Add string match

2005-08-29 16:04:07 -07:00

ipt_tcpmss.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_TCPMSS.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ipt_tos.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_TOS.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ipt_ttl.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_TTL.c

[NETFILTER]: Add new iptables TTL target

2005-08-29 16:13:22 -07:00

ipt_ULOG.c

[NETFILTER]: Fix module_param types and permissions

2006-01-05 12:19:46 -08:00

iptable_filter.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

iptable_mangle.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

iptable_raw.c

[NETFILTER]: Missing owner-field initialization in iptable_raw

2005-05-03 14:23:13 -07:00

Kconfig

[NETFILTER]: Add ipt_policy/ip6t_policy matches

2006-01-07 12:57:38 -08:00

Makefile

[NETFILTER]: Add ipt_policy/ip6t_policy matches

2006-01-07 12:57:38 -08:00

nf_conntrack_l3proto_ipv4.c

[NETFILTER]: nf_conntrack_l3proto_ipv4.c needs net/route.h

2006-01-05 12:21:52 -08:00

nf_conntrack_proto_icmp.c

[NETFILTER]: Add ctnetlink port for nf_conntrack

2006-01-05 12:19:05 -08:00