Mark J Cox 6d1cfe3f17 [PATCH] raw_sendmsg DoS on 2.6 ...

Fix unchecked __get_user that could be tricked into generating a
memory read on an arbitrary address.  The result of the read is not
returned directly but you may be able to divine some information about
it, or use the read to cause a crash on some architectures by reading
hardware state.  CAN-2004-2492.

Fix from Al Viro, ack from Dave Miller.

Signed-off-by: Linus Torvalds <torvalds@osdl.org>

2005-09-19 18:45:42 -07:00

..

netfilter

[IPV6]: Bring Type 0 routing header in-line with rfc3542.

2005-09-10 00:15:06 -07:00

addrconf.c

[PATCH] timer initialization cleanup: DEFINE_TIMER

2005-09-09 14:03:48 -07:00

af_inet6.c

[NET]: Fix sparse warnings

2005-08-29 16:01:32 -07:00

ah6.c

[CRYPTO]: crypto_free_tfm() callers no longer need to check for NULL

2005-09-01 17:44:29 -07:00

anycast.c

[IPV6]: V6 route events reported with wrong netlink PID and seq number

2005-06-21 13:51:04 -07:00

datagram.c

[XFRM]: Always release dst_entry on error in xfrm_lookup

2005-09-08 15:11:55 -07:00

esp6.c

[CRYPTO]: crypto_free_tfm() callers no longer need to check for NULL

2005-09-01 17:44:29 -07:00

exthdrs_core.c

[SELINUX]: Fix ipv6_skip_exthdr() invocation causing OOPS.

2005-04-24 20:16:19 -07:00

exthdrs.c

[IPV6]: Bring Type 0 routing header in-line with rfc3542.

2005-09-10 00:15:06 -07:00

icmp.c

[XFRM]: Always release dst_entry on error in xfrm_lookup

2005-09-08 15:11:55 -07:00

inet6_hashtables.c

[INET6_HASHTABLES]: Move inet6_lookup functions to net/ipv6/inet6_hashtables.c

2005-08-29 15:57:29 -07:00

ip6_fib.c

[PATCH] timer initialization cleanup: DEFINE_TIMER

2005-09-09 14:03:48 -07:00

ip6_flowlabel.c

[PATCH] timer initialization cleanup: DEFINE_TIMER

2005-09-09 14:03:48 -07:00

ip6_input.c

[IPV4/6]: Check if packet was actually delivered to a raw socket to decide whether to send an ICMP unreachable

2005-08-29 15:37:22 -07:00

ip6_output.c

[IPV6]: Support IPV6_{RECV,}TCLASS socket options / ancillary data.

2005-09-08 10:19:03 +09:00

ip6_tunnel.c

[IPV6]: Don't redo xfrm_lookup for cached dst entries

2005-09-08 14:27:47 -07:00

ipcomp6.c

[CRYPTO]: crypto_free_tfm() callers no longer need to check for NULL

2005-09-01 17:44:29 -07:00

ipv6_sockglue.c

[IPV6]: Support IPV6_{RECV,}TCLASS socket options / ancillary data.

2005-09-08 10:19:03 +09:00

ipv6_syms.c

[NETFILTER]: Move ipv4 specific code from net/core/netfilter.c to net/ipv4/netfilter.c

2005-08-29 15:35:01 -07:00

Kconfig

[NET]: Make ipip/ip6_tunnel independant of XFRM

2005-07-19 14:03:34 -07:00

Makefile

[INET6_HASHTABLES]: Move inet6_lookup functions to net/ipv6/inet6_hashtables.c

2005-08-29 15:57:29 -07:00

mcast.c

[MCAST]: Fix MCAST_EXCLUDE line dupes

2005-09-14 20:53:42 -07:00

ndisc.c

[XFRM]: Always release dst_entry on error in xfrm_lookup

2005-09-08 15:11:55 -07:00

netfilter.c

[NET]: Make NETDEBUG pure printk wrappers

2005-08-29 15:56:08 -07:00

proc.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

protocol.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

raw.c

[PATCH] raw_sendmsg DoS on 2.6

2005-09-19 18:45:42 -07:00

reassembly.c

[IPV6]: Need to use pskb_trim_rcsum().

2005-09-08 12:57:43 -07:00

route.c

[NET]: Fix sparse warnings

2005-08-29 16:01:32 -07:00

sit.c

[NET]: Fix sparse warnings

2005-08-29 16:01:32 -07:00

sysctl_net_ipv6.c

[NET]: Fix sparse warnings

2005-08-29 16:01:32 -07:00

tcp_ipv6.c

[XFRM]: Always release dst_entry on error in xfrm_lookup

2005-09-08 15:11:55 -07:00

udp.c

[IPV6]: Check connect(2) status for IPv6 UDP socket (Re: xfrm_lookup)

2005-09-18 00:30:08 -07:00

xfrm6_input.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

xfrm6_output.c

[IPV6]: Fix xfrm tunnel oops with large packets

2005-05-23 13:11:07 -07:00

xfrm6_policy.c

From: Kazunori Miyazawa <kazunori@miyazawa.org>

2005-05-26 12:58:04 -07:00

xfrm6_state.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

xfrm6_tunnel.c

[NET]: use __read_mostly on kmem_cache_t , DEFINE_SNMP_STAT pointers

2005-08-29 16:11:18 -07:00