iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/mm
History
Pekka Enberg 93bc4e89c2 netfilter: fix double-free and use-after free 
As suggested by Patrick McHardy, introduce a __krealloc() that doesn't
free the original buffer to fix a double-free and use-after-free bug
introduced by me in netfilter that uses RCU.

Reported-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pekka Enberg <penberg@cs.helsinki.fi>
Tested-by: Dieter Ries <clip2@gmx.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-07-26 17:49:33 -07:00
..
allocpercpu.c
Christoph has moved
2008-07-04 10:40:04 -07:00
backing-dev.c
mm: bdi: fix race in bdi_class device creation
2008-05-20 13:31:53 -07:00
bootmem.c
Add return value to reserve_bootmem_node()
2008-06-21 11:25:10 -07:00
bounce.c
block: Initial support for data-less (or empty) barrier support
2007-10-16 11:03:56 +02:00
dmapool.c
dmapool: enable debugging for CONFIG_SLUB_DEBUG_ON too
2008-04-28 08:58:20 -07:00
fadvise.c
xip: support non-struct page backed memory
2008-04-28 08:58:23 -07:00
filemap_xip.c
xip: support non-struct page backed memory
2008-04-28 08:58:23 -07:00
filemap.c
vfs: export filemap_fdatawrite_range()
2008-07-11 19:27:31 -04:00
fremap.c
mm: fix various kernel-doc comments
2008-03-19 18:53:35 -07:00
highmem.c
highmem: Export totalhigh_pages.
2008-07-19 22:39:46 -07:00
hugetlb.c
hugetlb: fix lockdep error
2008-06-06 11:29:09 -07:00
internal.h
memory hotplug: free memmaps allocated by bootmem
2008-04-28 08:58:26 -07:00
Kconfig
Merge git://git.kernel.org/pub/scm/linux/kernel/git/hskinnemoen/avr32-2.6
2008-07-14 13:37:29 -07:00
maccess.c
kgdb: fix optional arch functions and probe_kernel_*
2008-04-17 20:05:39 +02:00
madvise.c
xip: support non-struct page backed memory
2008-04-28 08:58:23 -07:00
Makefile
uaccess: add probe_kernel_write()
2008-04-17 20:05:36 +02:00
memcontrol.c
memcg: simple stats for memory resource controller
2008-05-01 08:04:02 -07:00
memory_hotplug.c
memory_hotplug: always initialize pageblock bitmap
2008-05-14 19:11:15 -07:00
memory.c
get_user_pages(): fix possible page leak on oom
2008-07-04 10:40:04 -07:00
mempolicy.c
mempolicy: mask off internal flags for userspace API
2008-07-04 13:03:05 -07:00
mempool.c
spelling fixes: mm/
2007-10-20 01:27:18 +02:00
migrate.c
Christoph has moved
2008-07-04 10:40:04 -07:00
mincore.c
mm: remove nopage
2008-04-28 08:58:18 -07:00
mlock.c
do not limit locked memory when RLIMIT_MEMLOCK is RLIM_INFINITY
2007-07-16 09:05:37 -07:00
mmap.c
mm: Allow architectures to define additional protection bits
2008-07-09 16:30:45 +10:00
mmzone.c
mm: filter based on a nodemask as well as a gfp_mask
2008-04-28 08:58:19 -07:00
mprotect.c
Merge commit '85082fd7cbe3173198aac0eb5e85ab1edcc6352c' into test-build
2008-07-15 15:44:51 +10:00
mremap.c
sparse pointer use of zero as null
2007-10-18 14:37:31 -07:00
msync.c
Detach sched.h from mm.h
2007-05-21 09:18:19 -07:00
nommu.c
nommu: Correct kobjsize() page validity checks.
2008-06-12 07:56:17 -07:00
oom_kill.c
oom_kill: remove unused parameter in badness()
2008-04-28 08:58:26 -07:00
page_alloc.c
Merge branch 'generic-ipi' into generic-ipi-for-linus
2008-07-15 21:55:59 +02:00
page_io.c
mm: fix PageUptodate data race
2008-02-05 09:44:19 -08:00
page_isolation.c
memory hotremove: unset migrate type "ISOLATE" after removal
2007-11-14 18:45:38 -08:00
page-writeback.c
Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4
2008-07-15 08:36:38 -07:00
pagewalk.c
pagemap: pass mm into pagewalkers
2008-06-12 18:05:41 -07:00
pdflush.c
mm/pdflush.c: merge the same code in two path
2008-05-13 08:02:24 -07:00
prio_tree.c
spelling fixes: mm/
2007-10-20 01:27:18 +02:00
quicklist.c
quicklists: Only consider memory that can be used with GFP_KERNEL
2008-01-14 08:52:22 -08:00
readahead.c
mm: bdi: export BDI attributes in sysfs
2008-04-30 08:29:49 -07:00
rmap.c
mm: remove nopage
2008-04-28 08:58:18 -07:00
shmem_acl.c
[PATCH] Fix typos in mm/shmem_acl.c
2006-10-11 11:14:23 -07:00
shmem.c
mm: bdi: add separate writeback accounting capability
2008-04-30 08:29:50 -07:00
slab.c
Merge branch 'generic-ipi' into generic-ipi-for-linus
2008-07-15 21:55:59 +02:00
slob.c
slob: Fix to return wrong pointer
2008-05-19 20:55:25 +03:00
slub.c
slub: dump more data on slab corruption
2008-07-19 14:17:22 +03:00
sparse-vmemmap.c
Christoph has moved
2008-07-04 10:40:04 -07:00
sparse.c
revert "memory hotplug: allocate usemap on the section with pgdat"
2008-04-30 08:29:55 -07:00
swap_state.c
mm: bdi: add separate writeback accounting capability
2008-04-30 08:29:50 -07:00
swap.c
mm: fix atomic_t overflow in vm
2008-05-24 09:56:09 -07:00
swapfile.c
mm: use non-racy method for /proc/swaps creation
2008-04-29 08:06:20 -07:00
thrash.c
Bug in mm/thrash.c function grab_swap_token()
2007-05-11 08:29:32 -07:00
tiny-shmem.c
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6
2008-03-25 08:57:47 -07:00
truncate.c
fix invalidate_inode_pages2_range() to not clear ret
2008-04-28 08:58:18 -07:00
util.c
netfilter: fix double-free and use-after free
2008-07-26 17:49:33 -07:00
vmalloc.c
docbook: fix vmalloc missing parameter notation
2008-05-01 08:03:59 -07:00
vmscan.c
mm: fix incorrect variable type in do_try_to_free_pages()
2008-06-12 18:05:39 -07:00
vmstat.c
make vmstat cpu-unplug safe
2008-05-13 08:02:23 -07:00