iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net
History
Jakub Jankowski f5e85ce8e7 netfilter: nf_conntrack_h323: restore boundary check correctness 
Since commit bc7d811ace4a ("netfilter: nf_ct_h323: Convert
CHECK_BOUND macro to function"), NAT traversal for H.323
doesn't work, failing to parse H323-UserInformation.
nf_h323_error_boundary() compares contents of the bitstring,
not the addresses, preventing valid H.323 packets from being
conntrack'd.

This looks like an oversight from when CHECK_BOUND macro was
converted to a function.

To fix it, stop dereferencing bs->cur and bs->end.

Fixes: bc7d811ace4a ("netfilter: nf_ct_h323: Convert CHECK_BOUND macro to function")
Signed-off-by: Jakub Jankowski <shasta@toxcorp.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2019-05-06 00:36:17 +02:00
..
6lowpan
6lowpan: fix debugfs_simple_attr.cocci warnings
2019-01-22 09:51:19 +01:00
9p
9p/net: fix memory leak in p9_client_create
2019-03-13 11:50:04 +01:00
802
…
8021q
vlan: conditional inclusion of FCoE hooks to match netdevice.h and bnx2x
2019-04-04 17:18:34 -07:00
appletalk
appletalk: Fix potential NULL pointer dereference in unregister_snap_client
2019-03-15 11:25:48 -07:00
atm
net: atm: Fix potential Spectre v1 vulnerabilities
2019-04-16 21:01:45 -07:00
ax25
ax25: fix possible use-after-free
2019-01-23 11:18:00 -08:00
batman-adv
batman-adv: Fix genl notification for throughput_override
2019-03-25 09:31:19 +01:00
bluetooth
Bluetooth: Check address length before reading address field
2019-04-12 10:25:03 -07:00
bpf
bpf: fix warning about using plain integer as NULL
2019-03-08 21:17:07 +01:00
bpfilter
bpfilter: re-add header search paths to tools include to fix build error
2019-02-23 13:34:40 -08:00
bridge
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf
2019-04-22 21:23:55 -07:00
caif
net: caif: use skb helpers instead of open-coding them
2019-02-17 11:01:17 -08:00
can
can: bcm: check timer values before ktime conversion
2019-01-22 11:33:46 +01:00
ceph
libceph: fix breakage caused by multipage bvecs
2019-03-25 22:28:07 +01:00
core
socket: fix compat SO_RCVTIMEO_NEW/SO_SNDTIMEO_NEW
2019-04-16 21:52:22 -07:00
dcb
net: dcb: Add priority-to-DSCP map getters
2018-07-27 13:17:50 -07:00
dccp
dccp: Fix memleak in __feat_register_sp
2019-04-01 18:15:10 -07:00
decnet
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2019-01-29 21:18:54 -08:00
dns_resolver
dns: Allow the dns resolver to retrieve a server set
2018-10-04 09:40:52 -07:00
dsa
net: dsa: Implement flow_dissect callback for tag_qca
2019-03-28 16:57:19 -07:00
ethernet
net/ethernet: Add parse_protocol header_ops support
2019-02-22 12:55:31 -08:00
hsr
net/hsr: fix possible crash in add_timer()
2019-03-07 11:02:08 -08:00
ieee802154
net: remove unused struct inet_frag_queue.fragments field
2019-02-26 08:27:05 -08:00
ife
…
ipv4
tcp: add sanity tests in tcp_add_backlog()
2019-04-29 23:20:37 -04:00
ipv6
ipv6/flowlabel: wait rcu grace period before put_pid()
2019-04-29 23:30:13 -04:00
iucv
iucv: Remove SKB list assumptions.
2018-11-10 16:55:11 -08:00
kcm
kcm: switch order of device registration to fix a crash
2019-04-01 14:59:20 -07:00
key
af_key: unconditionally clone on broadcast
2019-02-12 10:36:42 +01:00
l2tp
l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv()
2019-04-26 11:18:23 -04:00
l3mdev
l3mdev: add function to retreive upper master
2018-12-03 14:15:26 -08:00
lapb
…
llc
llc: Check address length before reading address field
2019-04-12 10:25:03 -07:00
mac80211
mac80211: don't attempt to rename ERR_PTR() debugfs dirs
2019-04-23 13:47:05 +02:00
mac802154
mac802154: Remove VLA usage of skcipher
2018-09-28 12:46:07 +08:00
mpls
mpls: Fix 6PE forwarding
2019-03-19 16:00:22 -07:00
ncsi
net/ncsi: handle overflow when incrementing mac address
2019-04-23 21:15:15 -07:00
netfilter
netfilter: nf_conntrack_h323: restore boundary check correctness
2019-05-06 00:36:17 +02:00
netlabel
netlabel: fix out-of-bounds memory accesses
2019-02-27 21:45:24 -08:00
netlink
genetlink: use idr_alloc_cyclic for family->id assignment
2019-04-26 11:59:58 -04:00
netrom
net: netrom: Fix error cleanup path of nr_proto_init
2019-04-11 13:59:49 -07:00
nfc
NFC: nci: Add some bounds checking in nci_hci_cmd_received()
2019-04-06 15:05:07 -07:00
nsh
nsh: set mac len based on inner packet
2018-07-12 16:55:29 -07:00
openvswitch
openvswitch: fix flow actions reallocation
2019-03-28 17:15:44 -07:00
packet
net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec
2019-03-20 10:46:50 -07:00
phonet
phonet: fix building with clang
2019-02-21 16:23:56 -08:00
psample
…
qrtr
mm: replace all open encodings for NUMA_NO_NODE
2019-03-05 21:07:14 -08:00
rds
net: rds: exchange of 8K and 1M pool
2019-04-24 12:07:08 -07:00
rfkill
rfkill: gpio: Remove unused include
2018-12-18 13:13:56 +01:00
rose
net/rose: fix unbound loop in rose_loopback_timer()
2019-04-24 14:39:26 -07:00
rxrpc
rxrpc: fix race condition in rxrpc_input_packet()
2019-04-24 14:05:09 -07:00
sched
sch_cake: Make sure we can write the IP header before changing DSCP bits
2019-04-04 10:55:59 -07:00
sctp
sctp: Check address length before reading address family
2019-04-12 10:25:03 -07:00
smc
net/smc: move unhash before release of clcsock
2019-04-11 11:04:08 -07:00
strparser
net: strparser: partially revert "strparser: Call skb_unclone conditionally"
2019-04-10 13:07:02 -07:00
sunrpc
Fix miscellaneous nfsd bugs, in NFSv4.1 callbacks, NFSv4.1
2019-04-23 13:40:55 -07:00
switchdev
switchdev: Remove unused transaction item queue
2019-03-01 21:35:19 -08:00
tipc
tipc: set sysctl_tipc_rmem and named_timeout right range
2019-04-16 21:32:02 -07:00
tls
net/tls: fix copy to fragments in reencrypt
2019-04-27 20:17:19 -04:00
unix
io_uring-2019-03-06
2019-03-08 14:48:40 -08:00
vmw_vsock
vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock
2019-03-08 15:15:44 -08:00
wimax
wimax: remove blank lines at EOF
2018-07-24 14:10:42 -07:00
wireless
cfg80211: Notify previous user request during self managed wiphy registration
2019-04-23 13:45:30 +02:00
x25
net/x25: reset state in x25_connect()
2019-03-11 15:40:14 -07:00
xdp
xsk: fix umem memory leak on cleanup
2019-03-16 01:27:51 +01:00
xfrm
xfrm: Fix inbound traffic via XFRM interfaces across network namespaces
2019-02-18 10:58:54 +01:00
compat.c
Merge branch 'timers-2038-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2019-03-05 14:08:26 -08:00
Kconfig
net: devlink: turn devlink into a built-in
2019-02-26 08:49:05 -08:00
Makefile
net: split out functions related to registering inflight socket files
2019-02-28 08:24:23 -07:00
socket.c
net: add documentation to socket.c
2019-03-15 15:29:47 -07:00
sysctl_net.c
…