iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net/sctp
History
Marcelo Ricardo Leitner ccb79116c3 sctp: add param size validation for SCTP_PARAM_SET_PRIMARY 
commit ef6c8d6ccf0c1dccdda092ebe8782777cd7803c9 upstream.

When SCTP handles an INIT chunk, it calls for example:
sctp_sf_do_5_1B_init
  sctp_verify_init
    sctp_verify_param
  sctp_process_init
    sctp_process_param
      handling of SCTP_PARAM_SET_PRIMARY

sctp_verify_init() wasn't doing proper size validation and neither the
later handling, allowing it to work over the chunk itself, possibly being
uninitialized memory.

Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-09-26 14:08:56 +02:00
..
associola.c
net: sctp: associola.c: delete duplicated words
2020-08-24 16:21:43 -07:00
auth.c
sctp: move the active_key update after sh_keys is added
2021-08-12 13:22:06 +02:00
bind_addr.c
sctp: validate from_addr_param return
2021-07-19 09:44:55 +02:00
chunk.c
net: sctp: chunk.c: delete duplicated word
2020-08-24 16:21:43 -07:00
debug.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104
2019-05-24 17:39:00 +02:00
diag.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2020-03-12 22:34:48 -07:00
endpointola.c
sctp: get netns from asoc and ep base
2019-12-09 20:14:01 -08:00
input.c
sctp: validate chunk size in __rcv_asconf_lookup
2021-09-26 14:08:56 +02:00
inqueue.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104
2019-05-24 17:39:00 +02:00
ipv6.c
sctp: validate from_addr_param return
2021-07-19 09:44:55 +02:00
Kconfig
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
Makefile
…
objcnt.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104
2019-05-24 17:39:00 +02:00
offload.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2019-06-07 11:00:14 -07:00
output.c
sctp: get netns from asoc and ep base
2019-12-09 20:14:01 -08:00
outqueue.c
treewide: Use fallthrough pseudo-keyword
2020-08-23 17:36:59 -05:00
primitive.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104
2019-05-24 17:39:00 +02:00
proc.c
net: fix iteration for sctp transport seq_files
2021-02-17 11:02:29 +01:00
protocol.c
sctp: move 198 addresses from unusable to private scope
2021-07-31 08:16:11 +02:00
sm_make_chunk.c
sctp: add param size validation for SCTP_PARAM_SET_PRIMARY
2021-09-26 14:08:56 +02:00
sm_sideeffect.c
sctp: change to hold/put transport for proto_unreach_timer
2020-11-14 11:57:12 -08:00
sm_statefuns.c
sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b
2021-05-19 10:13:06 +02:00
sm_statetable.c
sctp: remove net sctp.x_enable working as a global switch
2019-08-19 18:27:29 -07:00
socket.c
sctp: trim optlen when it's a huge value in sctp_setsockopt
2021-07-28 14:35:38 +02:00
stream_interleave.c
sctp: get netns from asoc and ep base
2019-12-09 20:14:01 -08:00
stream_sched_prio.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104
2019-05-24 17:39:00 +02:00
stream_sched_rr.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104
2019-05-24 17:39:00 +02:00
stream_sched.c
sctp: rename asoc intl_enable to asoc peer.intl_capable
2019-07-08 20:16:25 -07:00
stream.c
net: sctp: Fix negotiation of the number of data streams.
2020-08-20 16:37:37 -07:00
sysctl.c
sysctl: pass kernel pointers to ->proc_handler
2020-04-27 02:07:40 -04:00
transport.c
sctp: change to hold/put transport for proto_unreach_timer
2020-11-14 11:57:12 -08:00
tsnmap.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104
2019-05-24 17:39:00 +02:00
ulpevent.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2020-05-31 17:48:46 -07:00
ulpqueue.c
net: sctp: ulpqueue.c: delete duplicated word
2020-08-24 16:21:43 -07:00