Eric Dumazet 30c7be26fd udplite: call proper backlog handlers ...

In commits 93821778def10 ("udp: Fix rcv socket locking") and
f7ad74fef3af ("net/ipv6/udp: UDP encapsulation: break backlog_rcv into
__udpv6_queue_rcv_skb") UDP backlog handlers were renamed, but UDPlite
was forgotten.

This leads to crashes if UDPlite header is pulled twice, which happens
starting from commit e6afc8ace6dd ("udp: remove headers from UDP packets
before queueing")

Bug found by syzkaller team, thanks a lot guys !

Note that backlog use in UDP/UDPlite is scheduled to be removed starting
from linux-4.10, so this patch is only needed up to linux-4.9

Fixes: 93821778def1 ("udp: Fix rcv socket locking")
Fixes: f7ad74fef3af ("net/ipv6/udp: UDP encapsulation: break backlog_rcv into __udpv6_queue_rcv_skb")
Fixes: e6afc8ace6dd ("udp: remove headers from UDP packets before queueing")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Andrey Konovalov <andreyknvl@google.com>
Cc: Benjamin LaHaise <bcrl@kvack.org>
Cc: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>

2016-11-24 15:32:14 -05:00

..

ila

ila: make nla_policy const

2016-09-01 14:09:01 -07:00

netfilter

netfilter: nft_dup: do not use sreg_dev if the user doesn't specify it

2016-10-31 13:17:38 +01:00

addrconf_core.c

ipv6: change ipv6_stub_impl.ipv6_dst_lookup to take net argument

2015-07-31 15:21:30 -07:00

addrconf.c

ipv6: bump genid when the IFA_F_TENTATIVE flag is clear

2016-11-24 12:04:10 -05:00

addrlabel.c

ipv6/addrlabel: fix ip6addrlbl_get()

2015-12-22 15:57:54 -05:00

af_inet6.c

tcp: Set read_sock and peek_len proto_ops

2016-08-28 23:32:41 -04:00

ah6.c

ah6: fix error return code

2015-08-25 13:37:31 -07:00

anycast.c

ipv6: coding style: comparison for equality with NULL

2015-03-31 13:51:54 -04:00

calipso.c

calipso: fix resource leak on calipso_genopt failure

2016-08-13 14:56:17 -07:00

datagram.c

sock: propagate __sock_cmsg_send() error

2016-05-16 13:46:23 -04:00

esp6.c

esp6: Switch to new AEAD interface

2015-05-28 11:23:20 +08:00

exthdrs_core.c

ipv6: constify the skb pointer of ipv6_find_tlv().

2016-06-27 15:06:15 -04:00

exthdrs_offload.c

ipv6: fix exthdrs offload registration in out_rt path

2015-09-02 15:31:00 -07:00

exthdrs.c

Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next

2016-07-07 10:15:34 +10:00

fib6_rules.c

net: flow: Add l3mdev flow update

2016-09-10 23:12:51 -07:00

fou6.c

fou: add Kconfig options for IPv6 support

2016-05-29 22:24:21 -07:00

icmp.c

net: icmp6_send should use dst dev to determine L3 domain

2016-11-07 20:30:19 -05:00

inet6_connection_sock.c

soreuseport: fast reuseport TCP socket selection

2016-02-11 03:54:15 -05:00

inet6_hashtables.c

inet: Fix missing return value in inet6_hash

2016-10-29 12:01:49 -04:00

ip6_checksum.c

ipv6: fix checksum annotation in udp6_csum_init

2016-06-14 15:26:42 -04:00

ip6_fib.c

ipv6: report NLM_F_CREATE and NLM_F_EXCL flags in RTM_NEWROUTE events

2016-09-09 16:50:23 -07:00

ip6_flowlabel.c

ipv6: add new struct ipcm6_cookie

2016-05-03 16:08:14 -04:00

ip6_gre.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2016-10-02 22:20:41 -04:00

ip6_icmp.c

ipv6: icmp: add a force_saddr param to icmp6_send()

2016-06-18 22:11:38 -07:00

ip6_input.c

net: vrf: ipv6 support for local traffic to local addresses

2016-06-08 00:25:38 -07:00

ip6_offload.c

net: add recursion limit to GRO

2016-10-20 14:32:22 -04:00

ip6_offload.h

udp: Add GRO functions to UDP socket

2016-04-07 16:53:29 -04:00

ip6_output.c

ipv6: Don't use ufo handling on later transformed packets

2016-10-31 13:10:41 -04:00

ip6_tunnel.c

ip6_tunnel: disable caching when the traffic class is inherited

2016-11-17 12:08:56 -05:00

ip6_udp_tunnel.c

ip6_udp_tunnel: remove unused IPCB related codes

2016-11-02 15:18:36 -04:00

ip6_vti.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2016-09-23 06:46:57 -04:00

ip6mr.c

ipmr, ip6mr: fix scheduling while atomic and a deadlock with ipmr_get_route

2016-09-25 23:41:39 -04:00

ipcomp6.c

ipv6: White-space cleansing : Structure layouts

2014-08-24 22:37:52 -07:00

ipv6_sockglue.c

ipv6: fix a potential deadlock in do_ipv6_setsockopt()

2016-10-21 11:29:02 -04:00

Kconfig

fou: fix IPv6 Kconfig options

2016-05-31 14:07:49 -07:00

Makefile

Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next

2016-07-07 10:15:34 +10:00

mcast_snoop.c

net: fix wrong skb_get() usage / crash in IGMP/MLD parsing code

2015-08-13 17:08:39 -07:00

mcast.c

ipv6: fix a potential deadlock in do_ipv6_setsockopt()

2016-10-21 11:29:02 -04:00

mip6.c

ipv6: use ktime_t for internal timestamps

2015-10-05 03:16:47 -07:00

ndisc.c

net: l3mdev: remove redundant calls

2016-09-10 23:12:52 -07:00

netfilter.c

ipv6: Pass struct net into ip6_route_me_harder

2015-09-29 20:21:32 +02:00

output_core.c

net: l3mdev: Add hook to output path

2016-09-10 23:12:52 -07:00

ping.c

udp: must lock the socket in udp_disconnect()

2016-10-20 14:45:52 -04:00

proc.c

proc: Reduce cache miss in snmp6_seq_show

2016-09-30 01:50:44 -04:00

protocol.c

net: Export inet_offloads and inet6_offloads

2014-09-19 17:15:31 -04:00

raw.c

udp: must lock the socket in udp_disconnect()

2016-10-20 14:45:52 -04:00

reassembly.c

ipv6: do not increment mac header when it's unset

2016-10-23 17:38:58 -04:00

route.c

net-ipv6: on device mtu change do not add mtu to mtu-less routes

2016-11-09 13:19:32 -05:00

sit.c

sit: make function ipip6_valid_ip_proto() static

2016-08-12 21:52:18 -07:00

syncookies.c

net: rename NET_{ADD|INC}_STATS_BH()

2016-04-27 22:48:24 -04:00

sysctl_net_ipv6.c

calipso: Add a label cache.

2016-06-27 15:06:17 -04:00

tcp_ipv6.c

tcp: take care of truncations done by sk_filter()

2016-11-13 12:30:02 -05:00

tcpv6_offload.c

tcp: cleanup static functions

2015-02-28 16:56:51 -05:00

tunnel6.c

ipv6: fix tunnel error handling

2015-11-03 10:52:13 -05:00

udp_impl.h

udplite: call proper backlog handlers

2016-11-24 15:32:14 -05:00

udp_offload.c

gso: Remove arbitrary checks for unsupported GSO

2016-05-20 18:03:15 -04:00

udp.c

udplite: call proper backlog handlers

2016-11-24 15:32:14 -05:00

udplite.c

udplite: call proper backlog handlers

2016-11-24 15:32:14 -05:00

xfrm6_input.c

vti6: fix input path

2016-09-21 10:09:14 +02:00

xfrm6_mode_beet.c

xfrm: simplify xfrm_address_t use

2015-03-31 13:58:35 -04:00

xfrm6_mode_ro.c

ipv4/ipv6: Fix FSF address in file headers

2013-12-06 12:37:56 -05:00

xfrm6_mode_transport.c

…

xfrm6_mode_tunnel.c

ipv6: update skb->csum when CE mark is propagated

2016-01-15 15:07:23 -05:00

xfrm6_output.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-10-24 06:54:12 -07:00

xfrm6_policy.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2016-09-12 15:52:44 -07:00

xfrm6_protocol.c

xfrm6: Properly handle unsupported protocols

2014-05-06 07:08:38 +02:00

xfrm6_state.c

ipv6: White-space cleansing : Line Layouts

2014-08-24 22:37:52 -07:00

xfrm6_tunnel.c

vti6: fix input path

2016-09-21 10:09:14 +02:00