Hannes Frederic Sowa
89bc7848a9
ipv6: protect mtu calculation of wrap-around and infinite loop by rounding issues ...
Raw sockets with hdrincl enabled can insert ipv6 extension headers
right into the data stream. In case we need to fragment those packets,
we reparse the options header to find the place where we can insert
the fragment header. If the extension headers exceed the link's MTU we
actually cannot make progress in such a case.
Instead of ending up in broken arithmetic or rounding towards 0 and
entering an endless loop in ip6_fragment, just prevent those cases by
aborting early and signal -EMSGSIZE to user space.
This is the second version of the patch which doesn't use the
overflow_usub function, which got reverted for now.
Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Cc: Dmitry Vyukov <dvyukov@google.com>
Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-10-29 07:01:50 -07:00
ipv6: Export nf_ct_frag6_consume_orig()
2015-10-27 19:32:17 -07:00
ipv6: gre: setup default multicast routes over PtP links
2015-10-11 05:30:43 -07:00
ipv6: change ipv6_stub_impl.ipv6_dst_lookup to take net argument
2015-07-31 15:21:30 -07:00
netlink: implement nla_put_in_addr and nla_put_in6_addr
2015-03-31 13:58:35 -04:00
ipv6: Disable flowlabel state ranges by default
2015-07-31 17:07:11 -07:00
ah6: fix error return code
2015-08-25 13:37:31 -07:00
ipv6: coding style: comparison for equality with NULL
2015-03-31 13:51:54 -04:00
net: Set sk_txhash from a random number
2015-07-29 22:44:04 -07:00
esp6: Switch to new AEAD interface
2015-05-28 11:23:20 +08:00
ipv6: use flag instead of u16 for hop in inet6_skb_parm
2015-07-09 15:06:59 -07:00
ipv6: coding style: comparison for equality with NULL
2015-03-31 13:51:54 -04:00
ipv6: fix exthdrs offload registration in out_rt path
2015-09-02 15:31:00 -07:00
ipv6: fix the incorrect return value of throw route
2015-10-23 02:38:18 -07:00
ipv6: change ipv6_stub_impl.ipv6_dst_lookup to take net argument
2015-07-31 15:21:30 -07:00
ila: Precompute checksum difference for translations
2015-08-24 10:34:40 -07:00
net: convert syn_wait_lock to a spinlock
2015-03-23 16:52:26 -04:00
inet: inet_twsk_deschedule factorization
2015-07-09 15:12:20 -07:00
udp: Generic functions to set checksum
2014-06-04 22:46:38 -07:00
ipv6: fix the incorrect return value of throw route
2015-10-23 02:38:18 -07:00
ipv6: Flow label state ranges
2015-05-03 21:58:01 -04:00
ip6_gre: Reduce log level in ip6gre_err() to debug
2015-09-24 15:28:43 -07:00
ipv6: White-space cleansing : Line Layouts
2014-08-24 22:37:52 -07:00
ipv6: fix crash over flow-based vxlan device
2015-07-26 20:54:56 -07:00
Revert "sit: Add gro callbacks to sit_offload"
2015-07-20 16:52:28 -07:00
ipv6: protect mtu calculation of wrap-around and infinite loop by rounding issues
2015-10-29 07:01:50 -07:00
ip6_tunnel: Reduce log level in ip6_tnl_err() to debug
2015-09-24 16:08:37 -07:00
vxlan: do not receive IPv4 packets on IPv6 socket
2015-08-29 13:07:54 -07:00
vti6: Add pmtu handling to vti6_xmit.
2015-06-01 16:03:43 -07:00
net: ipv6: use common fib_default_rule_pref
2015-09-09 14:19:50 -07:00
ipv6: White-space cleansing : Structure layouts
2014-08-24 22:37:52 -07:00
ipv6: coding style: comparison for equality with NULL
2015-03-31 13:51:54 -04:00
net: Identifier Locator Addressing module
2015-08-17 21:33:06 -07:00
net: Identifier Locator Addressing module
2015-08-17 21:33:06 -07:00
netfilter: Pass socket pointer down through okfn().
2015-04-07 15:25:55 -04:00
net: fix wrong skb_get() usage / crash in IGMP/MLD parsing code
2015-08-13 17:08:39 -07:00
net: Convert LIMIT_NETDEBUG to net_dbg_ratelimited
2014-11-11 14:10:31 -05:00
ipv6: send only one NEWLINK when RA causes changes
2015-08-31 21:20:29 -07:00
netfilter: bridge: forward IPv6 fragmented packets
2015-06-12 14:10:12 +02:00
netfilter: don't pull include/linux/netfilter.h from netns headers
2015-06-18 21:14:31 +02:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-03-09 23:38:02 -04:00
udp: Increment UDP_MIB_IGNOREDMULTI for arriving unmatched multicasts
2014-11-07 15:45:50 -05:00
net: Export inet_offloads and inet6_offloads
2014-09-19 17:15:31 -04:00
ipv6: Nonlocal bind
2015-07-09 21:09:10 -07:00
inet: frags: remove INET_FRAG_EVICTED and use list_evictor for the test
2015-07-26 21:00:15 -07:00
net: ipv6: Dont add RT6_LOOKUP_F_IFACE flag if saddr set
2015-10-22 07:36:19 -07:00
ip_gre: Add support to collect tunnel metadata.
2015-08-10 14:03:54 -07:00
tcp: get_cookie_sock() consolidation
2015-06-07 15:19:52 -07:00
ipv6: Implement different admin modes for automatic flow labels
2015-07-31 17:07:11 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-08-13 16:23:11 -07:00
tcp: cleanup static functions
2015-02-28 16:56:51 -05:00
ipv6: White-space cleansing : gaps between function and symbol export
2014-08-24 22:37:52 -07:00
ipv6: trivial whitespace fix
2015-08-17 14:34:48 -07:00
net: Remove iocb argument from sendmsg and recvmsg
2015-03-02 13:06:31 -05:00
ipv6: hash net ptr into fragmentation bucket selection
2015-03-25 14:07:04 -04:00
net: Eliminate no_check from protosw
2014-05-23 16:28:53 -04:00
netfilter: Pass socket pointer down through okfn().
2015-04-07 15:25:55 -04:00
xfrm: simplify xfrm_address_t use
2015-03-31 13:58:35 -04:00
xfrm6: Fix IPv6 ECN decapsulation
2015-08-11 12:41:34 +02:00
xfrm: Fix pmtu discovery for local generated packets.
2015-10-19 10:30:05 +02:00
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec
2015-10-22 07:46:05 -07:00
xfrm6: Properly handle unsupported protocols
2014-05-06 07:08:38 +02:00
ipv6: White-space cleansing : Line Layouts
2014-08-24 22:37:52 -07:00
ipv6: White-space cleansing : gaps between function and symbol export
2014-08-24 22:37:52 -07:00
89bc7848a9