Wang Yufen 2f42389d27 ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg ...

[ Upstream commit f638a84afe ]

When len >= INT_MAX - transhdrlen, ulen = len + transhdrlen will be
overflow. To fix, we can follow what udpv6 does and subtract the
transhdrlen from the max.

Signed-off-by: Wang Yufen <wangyufen@huawei.com>
Link: https://lore.kernel.org/r/20220607120028.845916-2-wangyufen@huawei.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-06-22 14:11:21 +02:00

..

Kconfig

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00

l2tp_core.c

net/l2tp: Fix reference count leak in l2tp_udp_recv_core

2021-09-22 12:26:41 +02:00

l2tp_core.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

l2tp_debugfs.c

l2tp: no need to check return value of debugfs_create functions

2019-06-14 08:45:05 -07:00

l2tp_eth.c

net: core: add generic lockdep keys

2019-10-24 14:53:48 -07:00

l2tp_ip6.c

ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg

2022-06-22 14:11:21 +02:00

l2tp_ip.c

l2tp: do not use inet_hash()/inet_unhash()

2020-06-10 20:24:54 +02:00

l2tp_netlink.c

l2tp: Allow management of tunnels and session in user namespace

2020-04-21 09:04:44 +02:00

l2tp_ppp.c

compat_ioctl: pppoe: fix PPPOEIOCSFWD handling

2019-07-30 14:42:13 -07:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00