Eric Dumazet 64022d0b4e tcp: fix crashes in do_tcp_sendpages() ...

Recent network changes allowed high order pages being used
for skb fragments.

This uncovered a bug in do_tcp_sendpages() which was assuming its caller
provided an array of order-0 page pointers.

We only have to deal with a single page in this function, and its order
is irrelevant.

Reported-by: Willy Tarreau <w@1wt.eu>
Tested-by: Willy Tarreau <w@1wt.eu>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2012-12-01 20:39:16 -05:00

..

9p

The following changes since commit 4cbe5a555fa58a79b6ecbb6c531b8bab0650778d:

2012-10-12 09:59:23 +09:00

802

tokenring: delete all remaining driver support

2012-05-15 20:23:16 -04:00

8021q

vlan: allow to change type when no vlan device is hooked on netdev

2012-10-18 15:34:30 -04:00

appletalk

userns: Print out socket uids in a user namespace aware fashion.

2012-08-14 21:48:06 -07:00

atm

net🏧fix up ENOIOCTLCMD error handling

2012-08-31 16:14:33 -04:00

ax25

userns: Convert net/ax25 to use kuid_t where appropriate

2012-08-14 21:49:42 -07:00

batman-adv

batman-adv: process broadcast packets in BLA earlier

2012-11-16 09:36:54 +01:00

bluetooth

Bluetooth: Fix memory leak when removing a UUID

2012-11-09 16:45:37 +01:00

bridge

bridge: Pull ip header into skb->data before looking into ip header.

2012-10-10 22:50:45 -04:00

caif

caif: move the dereference below the NULL test

2012-09-10 16:13:31 -04:00

can

can: bcm: initialize ifindex for timeouts without previous frame reception

2012-11-26 22:33:59 +01:00

ceph

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

2012-10-29 08:49:25 -07:00

core

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless into for-davem

2012-11-21 11:48:31 -05:00

dcb

netlink: Rename pid to portid to avoid confusion

2012-09-10 15:30:41 -04:00

dccp

dccp: fix info leak via getsockopt(DCCP_SOCKOPT_CCID_TX_INFO)

2012-08-15 21:36:31 -07:00

decnet

sections: fix section conflicts in net

2012-10-06 03:04:45 +09:00

dns_resolver

Merge branch 'modules-next' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux

2012-10-14 13:39:34 -07:00

dsa

workqueue: deprecate flush[_delayed]_work_sync()

2012-08-20 14:51:24 -07:00

ethernet

ipx: move peII functions

2012-07-19 10:48:00 -07:00

ieee802154

net/ieee802154/6lowpan.c: Remove unecessary semicolon

2012-09-18 16:08:19 -04:00

ipv4

tcp: fix crashes in do_tcp_sendpages()

2012-12-01 20:39:16 -05:00

ipv6

ipv6: fix inet6_csk_update_pmtu() return value

2012-11-20 15:16:15 -05:00

ipx

userns: Print out socket uids in a user namespace aware fashion.

2012-08-14 21:48:06 -07:00

irda

irda: irttp: fix memory leak in irttp_open_tsap() error path

2012-11-28 11:25:29 -05:00

iucv

net: remove skb_orphan_try()

2012-06-15 15:30:15 -07:00

key

net/key/af_key.c: add range checks on ->sadb_x_policy_len

2012-10-01 17:15:06 -04:00

l2tp

l2tp: fix oops in l2tp_eth_create() error path

2012-11-02 21:56:35 -04:00

lapb

lapb: Neaten debugging

2012-05-17 18:45:20 -04:00

llc

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace

2012-10-02 11:11:09 -07:00

mac80211

mac80211: fix remain-on-channel (non-)cancelling

2012-11-26 14:41:40 -05:00

mac802154

mac802154: sparse warnings: make symbols static

2012-07-12 07:54:45 -07:00

netfilter

netfilter: ipset: fix netiface set name overflow

2012-11-24 23:48:23 +01:00

netlabel

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2012-10-02 13:38:27 -07:00

netlink

netlink: use kfree_rcu() in netlink_release()

2012-10-18 15:34:30 -04:00

netrom

net: change return values from -EACCES to -EPERM

2012-09-21 13:58:08 -04:00

nfc

NFC: Fix nfc_llcp_local chained list insertion

2012-11-20 00:09:25 +01:00

openvswitch

openvswitch: Store flow key len if ARP opcode is not request or reply.

2012-10-30 17:17:09 -07:00

packet

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace

2012-10-02 11:11:09 -07:00

phonet

netlink: Rename pid to portid to avoid confusion

2012-09-10 15:30:41 -04:00

rds

RDS: fix rds-ping spinlock recursion

2012-10-09 13:57:23 -04:00

rfkill

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2012-10-02 13:38:27 -07:00

rose

net: Convert all sysctl registrations to register_net_sysctl

2012-04-20 21:22:30 -04:00

rxrpc

Merge branch 'modules-next' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux

2012-10-14 13:39:34 -07:00

sched

pkt_sched: enable QFQ to support TSO/GSO

2012-11-07 15:37:04 -05:00

sctp

sctp: Error in calculation of RTTvar

2012-11-28 11:13:40 -05:00

sunrpc

SUNRPC: return proper errno from backchannel_rqst

2012-11-01 11:50:53 -04:00

tipc

tipc: do not use tasklet_disable before tasklet_kill

2012-11-03 15:10:14 -04:00

unix

af_unix: old_cred is surplus

2012-09-17 13:00:13 -04:00

wanrouter

wanmain: comparing array with NULL

2012-07-24 13:55:21 -07:00

wimax

net: cleanup unsigned to unsigned int

2012-04-15 12:44:40 -04:00

wireless

wireless: allow 40 MHz on world roaming channels 12/13

2012-11-12 16:26:06 +01:00

x25

net: Fix (nearly-)kernel-doc comments for various functions

2012-07-10 23:13:45 -07:00

xfrm

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2012-10-02 13:38:27 -07:00

compat.c

make get_file() return its argument

2012-09-26 21:10:25 -04:00

Kconfig

net: Add INET dependency on aes crypto for the sake of TCP fastopen.

2012-09-04 14:20:14 -04:00

Makefile

econet: remove ancient bug ridden protocol

2012-05-18 01:35:08 -04:00

nonet.c

…

socket.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2012-10-02 20:25:04 -07:00

sysctl_net.c

net: delete all instances of special processing for token ring

2012-05-15 20:14:35 -04:00