Ang Way Chuang
29e1fa3565
dvb-core: Fix DoS bug in ULE decapsulation code that can be triggered by an invalid Payload Pointer ...
ULE (Unidirectional Lightweight Encapsulation RFC 4326) decapsulation
has a bug that causes endless loop when Payload Pointer of MPEG2-TS
frame is 182 or 183. Anyone who sends malicious MPEG2-TS frame will
cause the receiver of ULE SNDU to go into endless loop.
This patch was generated and tested against linux-2.6.32.9 and should
apply cleanly to linux-2.6.33 as well because there was only one typo
fix to dvb_net.c since v2.6.32.
This bug was brought to you by modern day Santa Claus who decided to
shower the satellite dish at Keio University with heavy snow causing
huge burst of errors. We, receiver end, received Santa Claus's gift in
the form of kernel bug.
Care has been taken not to introduce more bug by fixing this bug, but
please scrutinize the code for I always produces buggy code.
Signed-off-by: Ang Way Chuang <wcang79@gmail.com>
Acked-by: Mauro Carvalho Chehab <mchehab@redhat.com>
Cc: stable@kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2010-02-26 17:15:44 -08:00
Merge branch 'linux-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jbarnes/pci-2.6
2010-02-26 10:35:27 -08:00
ahci: disable FPDMA auto-activate optimization on NVIDIA AHCI
2010-02-24 22:44:48 -05:00
class: Free the class private data in class_release
2010-02-16 15:43:00 -08:00
virtio_blk: add block topology support
2010-02-24 14:22:26 +10:30
Bluetooth: Fix memory leak in Marvell BT-over-SDIO driver
2010-02-03 19:08:30 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2010-02-26 16:50:02 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/lethal/sh-2.6
2010-02-26 16:54:27 -08:00
connector: Delete buggy notification code.
2010-02-02 15:58:48 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2010-02-26 16:50:02 -08:00
Merge branch 'sh/stable-updates'
2010-02-15 14:49:37 +09:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/bp/bp
2010-02-11 14:07:13 -08:00
firewire: ohci: retransmit isochronous transmit packets on cycle loss
2010-02-14 15:10:41 +01:00
Merge branch 'next-devicetree' of git://git.secretlab.ca/git/linux-2.6
2010-02-25 15:38:37 -08:00
Merge branches 'upstream', 'raw_report_modifications' and 'apple_magic_mouse' into for-linus
2010-02-25 17:39:16 +01:00
hwmon: (w83781d) Request I/O ports individually for probing
2010-02-05 19:58:36 +01:00
i2c-tiny-usb: Fix on big-endian systems
2010-02-05 17:48:13 +01:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/roland/infiniband
2010-02-11 14:01:25 -08:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2010-02-22 08:48:06 -08:00
PCI: push deprecated pci_find_device() function to last user
2010-02-22 16:17:01 -08:00
of: add 'of_' prefix to machine_is_compatible()
2010-02-09 08:33:00 -07:00
dm: sysfs revert add empty release function to avoid debug warning
2010-02-16 18:43:04 +00:00
dvb-core: Fix DoS bug in ULE decapsulation code that can be triggered by an invalid Payload Pointer
2010-02-26 17:15:44 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi-misc-2.6
2010-02-26 16:55:27 -08:00
mfd: Fix asic3 build
2010-01-29 21:03:09 +01:00
mmc_test: block addressed cards
2010-02-11 13:59:42 -08:00
mtd: sh_flctl SHBUSSEL and SEL_16BIT support
2010-02-02 13:02:16 +09:00
Merge branch 'next-devicetree' of git://git.secretlab.ca/git/linux-2.6
2010-02-25 15:38:37 -08:00
of: move definition of of_chosen into common code.
2010-02-14 07:13:55 -07:00
PCI: augment bus resource table with a list
2010-02-23 09:43:37 -08:00
PCI: add pci_bus_for_each_resource(), remove direct bus->resource[] refs
2010-02-23 09:43:31 -08:00
acer-wmi: Respect current backlight level when loading
2010-02-19 00:19:26 -05:00
wm97xx_battery: Handle missing platform data gracefully
2010-01-29 17:00:18 +03:00
regulator/lp3971: vol_map out of bounds in lp3971_{ldo,dcdc}_set_voltage()
2010-02-12 11:39:49 +00:00
rtc-fm3130: add missing braces
2010-02-02 18:11:21 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi-misc-2.6
2010-02-26 16:55:27 -08:00
Merge commit 'v2.6.33-rc5' into secretlab/test-devicetree
2010-01-28 14:38:25 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi-misc-2.6
2010-02-26 16:55:27 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/lethal/sh-2.6
2010-02-26 16:54:27 -08:00
sh: Use dummy_irq_chip for INTC redirect vectors.
2010-02-17 12:37:42 +09:00
Merge branch 'next-spi' of git://git.secretlab.ca/git/linux-2.6
2010-02-25 15:38:03 -08:00
ssb: Fix CONFIG_SSB_SDIOHOST typo
2010-02-03 16:55:20 -05:00
Merge branch 'drm-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/airlied/drm-2.6
2010-02-01 10:46:49 -08:00
Lower USB storage settling delay to something more reasonable
2010-02-26 10:03:22 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/lethal/sh-2.6
2010-02-26 16:54:27 -08:00
virtio: Initialize vq->data entries to NULL
2010-02-24 14:22:29 +10:30
[WATCHDOG] bfin: fix max timeout calculation
2010-02-21 19:16:30 +00:00
29e1fa3565