Johannes Berg
56738f4608
netlink: add strict parsing for future attributes ...
Unfortunately, we cannot add strict parsing for all attributes, as
that would break existing userspace. We currently warn about it, but
that's about all we can do.
For new attributes, however, the story is better: nobody is using
them, so we can reject bad sizes.
Also, for new attributes, we need not accept them when the policy
doesn't declare their usage.
David Ahern and I went back and forth on how to best encode this, and
the best way we found was to have a "boundary type", from which point
on new attributes have all possible validation applied, and NLA_UNSPEC
is rejected.
As we didn't want to add another argument to all functions that get a
netlink policy, the workaround is to encode that boundary in the first
entry of the policy array (which is for type 0 and thus probably not
really valid anyway). I put it into the validation union for the rare
possibility that somebody is actually using attribute 0, which would
continue to work fine unless they tried to use the extended validation,
which isn't likely. We also didn't find any in-tree users with type 0.
The reason for setting the "start strict here" attribute is that we
never really need to start strict from 0, which is invalid anyway (or
in legacy families where that isn't true, it cannot be set to strict),
so we can thus reserve the value 0 for "don't do this check" and don't
have to add the tag to all policies right now.
Thus, policies can now opt in to this validation, which we should do
for all existing policies, at least when adding new attributes.
Note that entirely *new* policies won't need to set it, as the use
of that should be using nla_parse()/nlmsg_parse() etc. which anyway
do fully strict validation now, regardless of this.
So in effect, this patch only covers the "existing command with new
attribute" case.
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2019-04-27 17:07:22 -04:00
9p: Add refcount to p9_req_t
2018-09-08 01:39:47 +09:00
Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
2019-04-25 06:18:07 -07:00
caif: reduce stack size with KASAN
2018-01-19 14:02:12 -05:00
net/af_iucv: locate IUCV header via skb_network_header()
2018-09-26 09:56:07 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2019-04-25 23:52:29 -04:00
ipv6: Add rate limit mask for ICMPv6 messages
2019-04-18 16:58:37 -07:00
nfc: nci: Potential off by one in ->pipes[] array
2019-04-06 15:05:07 -07:00
phonet: fix building with clang
2019-02-21 16:23:56 -08:00
sctp: implement memory accounting on rx path
2019-04-15 13:36:51 -07:00
net: tc_act: drop include of module.h from tc_ife.h
2019-04-22 21:50:53 -07:00
net/sched: let actions use RCU to access 'goto_chain'
2019-03-21 13:26:42 -07:00
ipv6: Move ipv6 stubs to a separate header file
2019-03-29 10:53:45 -07:00
ieee802154: add rx LQI from userspace
2018-07-13 12:18:18 -04:00
rxrpc: Make rxrpc_kernel_check_life() indicate if call completed
2019-04-12 16:57:23 -07:00
net: split out functions related to registering inflight socket files
2019-02-28 08:24:23 -07:00
vsock: split dwork to avoid reinitializations
2018-08-07 12:39:13 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ipv4: Make neigh lookup keys for loopback/point-to-point devices be INADDR_ANY
2018-01-15 14:53:43 -05:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ax25: fix possible use-after-free
2019-01-23 11:18:00 -08:00
net-next: ax88796: add interrupt status callback to platform data
2018-04-19 16:11:11 -04:00
bonding: count master 3ad stats separately
2019-01-24 22:18:48 -08:00
bonding: avoid possible dead-lock
2018-09-26 20:22:19 -07:00
net: remove sock_poll_busy_flag
2018-07-30 09:10:25 -07:00
Various updates, notably:
2019-04-26 16:05:52 -04:00
Remove 'type' argument from access_ok() function
2019-01-03 18:57:57 -08:00
net: rework SIOCGSTAMP ioctl handling
2019-04-19 14:07:40 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: dcb: Add priority-to-DSCP map getters
2018-07-27 13:17:50 -07:00
net: devlink: Add extack to shared buffer operations
2019-04-22 22:09:32 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-11-04 09:26:51 +09:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net/decnet: Convert timers to use timer_setup()
2017-10-18 12:39:36 +01:00
decnet: Move dn_next into decnet route structure.
2017-11-30 09:54:25 -05:00
net: dsa: read mac address from DT for slave device
2019-04-01 14:57:32 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: dst: remove gc leftovers
2019-03-21 13:39:25 -07:00
net: core: dst_cache_set_ip6: Rename 'addr' parameter to 'saddr' for consistency
2018-03-05 12:52:45 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-11-04 09:26:51 +09:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
erspan: set bso bit based on mirrored packet's len
2018-05-20 18:31:42 -04:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
inet: whitespace cleanup
2018-02-28 11:43:28 -05:00
net: Introduce generic failover module
2018-05-28 22:59:54 -04:00
net: fib: drop include of module.h from fib_notifier.h
2019-04-22 21:50:53 -07:00
net: fib_rules: add extack support
2018-04-23 10:21:24 -04:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
route: Add multipath_hash in flowi_common to make user-define hash
2019-02-27 12:50:17 -08:00
net/flow_dissector: correct comments on enum flow_dissector_key_id
2018-11-30 13:21:52 -08:00
flow_offload: fix block stats
2019-02-13 21:07:47 -08:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
fq: support filtering a given tin
2017-10-11 09:49:34 +02:00
mac80211: calculate hash for fq without holding fq->lock in itxq enqueue
2019-04-26 13:02:11 +02:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: align gnet_stats_basic_cpu struct
2018-11-17 21:37:29 -08:00
netlink: re-add parse/validate functions in strict mode
2019-04-27 17:07:22 -04:00
net: Move the definition of the default Geneve udp port to public header file
2019-03-22 12:09:31 -07:00
net: Add netif_is_gretap()/netif_is_ip6gretap()
2018-12-10 15:53:04 -08:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
fou: fix some member types in guehdr
2017-12-11 14:10:06 -05:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: Add __icmp_send helper.
2019-02-25 14:32:35 -08:00
wireless-drivers-next patches for 5.1
2019-02-22 12:56:24 -08:00
net/ipv6: Add anycast addresses to a global hashtable
2018-11-02 23:54:56 -07:00
net: ife: drop include of module.h from net/ife.h
2019-04-22 21:50:53 -07:00
net: allow binding socket in a VRF when there's an unbound socket
2018-11-07 16:12:38 -08:00
net: use indirect call wrappers at GRO transport layer
2018-12-15 13:23:02 -08:00
tcp: change pingpong threshold to 3
2019-01-27 13:29:43 -08:00
inet: Refactor INET_ECN_decapsulate()
2018-10-17 17:45:07 -07:00
net: remove unused struct inet_frag_queue.fragments field
2019-02-26 08:27:05 -08:00
net: dccp: fix kernel crash on module load
2018-12-24 15:27:56 -08:00
net: ensure unbound stream socket to be chosen when not in a VRF
2018-11-07 16:12:38 -08:00
net-tcp: remove useless tw_timeout field
2018-06-05 10:45:24 -04:00
net: ipv4: use a dedicated counter for icmp_v4 redirect packets
2019-02-08 21:50:15 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2019-04-05 14:14:19 -07:00
ipv6: Use result arg in fib_lookup_arg consistently
2019-04-23 21:53:11 -07:00
net: Change nhc_flags to unsigned char
2019-04-23 19:44:18 -07:00
udp: Support for error handlers of tunnels with arbitrary destination port
2018-11-08 17:13:08 -08:00
net: Change nhc_flags to unsigned char
2019-04-23 19:44:18 -07:00
route: Add multipath_hash in flowi_common to make user-define hash
2019-02-27 12:50:17 -08:00
ipvs: allow tunneling with gue encapsulation
2019-04-08 22:57:59 +02:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ipv6: factor out protocol delivery helper
2018-11-07 16:23:05 -08:00
net: IP6 defrag: use rbtrees for IPv6 defrag
2019-01-25 21:37:11 -08:00
ipv6: Pass fib6_result to fib lookups
2019-04-17 23:10:47 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: Spelling s/stucture/structure/
2018-03-27 09:51:23 +02:00
ipvlan, l3mdev: fix broken l3s mode wrt local routes
2019-01-30 22:13:34 -08:00
net: Add lag.h, net_lag_port_dev_txable()
2018-07-11 23:10:19 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
llc: avoid blocking in llc_sap_close()
2018-09-13 09:04:58 -07:00
net: LLC: Convert timers to use timer_setup()
2017-10-25 12:06:25 +09:00
llc: delete timers synchronously in llc_sk_free()
2018-04-22 14:55:03 -04:00
lwtunnel: Pass encap and encap type attributes to lwtunnel_fill_encap
2019-04-23 19:42:29 -07:00
Various updates, notably:
2019-04-26 16:05:52 -04:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ipv6: Add neighbor helpers that use the ipv6 stub
2019-04-08 15:22:40 -07:00
net ipv6: Prevent neighbor add if protocol is disabled on device
2019-04-17 23:19:07 -07:00
net: Introduce net_failover driver
2018-05-28 22:59:54 -04:00
netns: provide pure entropy for net_hash_mix()
2019-03-28 17:00:45 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: ipv4: Notify about changes to ip_forward_update_priority
2018-08-01 09:52:30 -07:00
netlink: add strict parsing for future attributes
2019-04-27 17:07:22 -04:00
net: netrom: Fix error cleanup path of nr_proto_init
2019-04-11 13:59:49 -07:00
openvswitch: enable NSH support
2017-11-08 16:12:33 +09:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xdp: introduce xdp_return_frame_rx_napi
2018-05-24 18:36:15 -07:00
ipv{4,6}/ping: simplify proc file creation
2018-05-16 07:23:35 +02:00
net: sched: set dedicated tcf_walker flag when tp is empty
2019-02-25 10:18:17 -08:00
net: sched: extend Qdisc with rcu
2018-09-25 20:17:35 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: Convert protocol error handlers from void to int
2018-11-08 17:13:08 -08:00
net: psample: drop include of module.h from psample.h
2019-04-22 21:50:53 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: fix raw socket lookup device bind matching with VRFs
2018-11-07 16:12:39 -08:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net_sched: red: Avoid illegal values
2017-12-05 14:37:13 -05:00
cfg80211: make wmm_rule part of the reg_rule structure
2018-08-28 11:11:47 +02:00
tcp: free request sock directly upon TFO or syncookies error
2019-03-19 14:13:01 -07:00
proc: introduce proc_create_seq{,_data}
2018-05-16 07:23:35 +02:00
ipv4: Add helpers for neigh lookup for nexthop
2019-04-08 15:22:41 -07:00
Bluetooth: btrsi: add new rsi bluetooth driver
2018-03-13 18:37:02 +02:00
net: Add extack argument to rtnl_create_link
2018-11-06 15:00:45 -08:00
net: Rename net/nexthop.h net/rtnh.h
2019-04-22 21:47:25 -07:00
Revert: "net: sched: put back q.qlen into a single location"
2019-04-10 12:20:46 -07:00
pids: Compute task_tgid using signal->leader_pid
2018-07-21 10:43:12 -05:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: seg6.h: remove an unused #include
2018-12-20 16:56:04 -08:00
rhashtable: split rhashtable.h
2018-06-22 13:43:27 +09:00
bpf: add End.DT6 action to bpf_lwt_seg6_action helper
2018-07-31 09:22:48 +02:00
slip: Check if rstate is initialized before uncompressing
2018-04-11 10:33:46 -04:00
net/smc: add smcd support to the pnet table
2019-02-21 10:34:37 -08:00
net: rework SIOCGSTAMP ioctl handling
2019-04-19 14:07:40 -07:00
bpf: Enable BPF_PROG_TYPE_SK_REUSEPORT bpf prog in reuseport selection
2018-08-11 01:58:46 +02:00
net/mac89x0: Convert to platform_driver
2018-03-01 21:21:36 -05:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
strparser: Add __strp_unpause and use it in ktls.
2018-06-06 14:07:53 -04:00
switchdev: Remove unused transaction item queue
2019-03-01 21:35:19 -08:00
include/net/tcp.h: whitespace cleanup at tcp_v4_check
2019-04-22 21:45:58 -07:00
tcp: remove the hardcode in the definition of TCPF Macro
2018-02-21 15:06:05 -05:00
flow_dissector: do not rely on implicit casts
2018-05-08 00:02:41 -04:00
net/tls: byte swap device req TCP seq no upon setting
2019-04-27 16:52:21 -04:00
ipv6: fold sockcm_cookie into ipcm6_cookie
2018-07-07 10:58:49 +09:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
datagram: remove rendundant 'peeked' argument
2019-04-08 09:51:54 -07:00
ipv6: Move ipv6 stubs to a separate header file
2019-03-29 10:53:45 -07:00
udplite: fix partial checksum initialization
2018-02-16 15:57:42 -05:00
net: Add IANA_VXLAN_UDP_PORT definition to vxlan header file
2019-03-22 12:09:31 -07:00
lift handling of SIOCIW... out of dev_ioctl()
2018-01-24 19:13:45 -05:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xdp: export xdp_rxq_info_unreg_mem_model
2018-08-29 12:25:53 -07:00
xsk: fix umem memory leak on cleanup
2019-03-16 01:27:51 +01:00
xfrm: destroy xfrm_state synchronously on net exit path
2019-02-05 06:29:20 +01:00
56738f4608