Marcelo Ricardo Leitner
03a5e45461
sctp: validate from_addr_param return ...
[ Upstream commit 0c5dc070ff3d6246d22ddd931f23a6266249e3db ]
Ilja reported that, simply putting it, nothing was validating that
from_addr_param functions were operating on initialized memory. That is,
the parameter itself was being validated by sctp_walk_params, but it
doesn't check for types and their specific sizes and it could be a 0-length
one, causing from_addr_param to potentially work over the next parameter or
even uninitialized memory.
The fix here is to, in all calls to from_addr_param, check if enough space
is there for the wanted IP address type.
Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-07-19 08:53:13 +02:00
Bluetooth: verify AMP hci_chan before amp_destroy
2021-05-14 09:44:10 +02:00
net: caif: add proper error handling
2021-06-10 13:37:09 +02:00
netfilter: nft_dynset: fix timeouts later than 23 days
2020-12-30 11:50:54 +01:00
net: xfrm: Localize sequence counter per network namespace
2021-04-14 08:24:13 +02:00
NFC: nci: fix memory leak in nci_allocate_device
2021-05-28 13:10:27 +02:00
sctp: validate from_addr_param return
2021-07-19 08:53:13 +02:00
net/sched: act_vlan: Fix modify to allow 0
2021-07-14 16:53:27 +02:00
net: sched: fix police ext initialization
2021-03-04 10:26:53 +01:00
net: bridge: mcast: fix broken length + header check for MRDv6 Adv.
2021-05-14 09:44:32 +02:00
rxrpc: Make rxrpc_kernel_get_srtt() indicate validity
2020-09-09 19:12:23 +02:00
bonding: wait for sysfs kobject destruction before freeing struct slave
2020-12-08 10:40:24 +01:00
mac80211: properly handle A-MSDUs that start with an RFC 1042 header
2021-06-03 08:59:01 +02:00
net: drop_monitor: use IS_REACHABLE() to guard net_dm_hw_report()
2020-05-27 17:46:24 +02:00
net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb
2020-07-22 09:32:47 +02:00
fib: add missing attribute validation for tun_id
2020-03-18 07:17:44 +01:00
ipv4: Initialize flowi4_multipath_hash in data path
2020-09-26 18:03:12 +02:00
net: sched: correct flower port blocking
2020-03-05 16:43:32 +01:00
genetlink: remove genl_bind
2020-07-22 09:32:46 +02:00
net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending
2021-03-04 10:26:53 +01:00
tcp: relookup sock for RST+ACK packets handled by obsolete req sock
2021-03-30 14:35:26 +02:00
inet_ecn: Fix endianness of checksum update when setting ECT(1)
2020-12-08 10:40:25 +01:00
dccp: Fix possible memleak in dccp_init and dccp_fini
2020-06-17 16:40:32 +02:00
net: lwtunnel: handle MTU calculation in forwading
2021-07-14 16:53:35 +02:00
ipv6: Use global sernum for dst validation with nexthop objects
2020-05-14 07:58:20 +02:00
net: lwtunnel: handle MTU calculation in forwading
2021-07-14 16:53:35 +02:00
ipv4: nexthop version of fib_info_nh_uses_dev
2020-06-03 08:21:37 +02:00
ip_tunnels: Set tunnel option flag when tunnel metadata is present
2020-11-24 13:29:05 +01:00
ipvs: allow connection reuse for unconfirmed conntrack
2020-08-19 08:16:10 +02:00
bonding/alb: properly access headers in bond_alb_xmit()
2020-02-11 04:35:48 -08:00
mac80211: populate debugfs only after cfg80211 init
2020-04-29 16:33:18 +02:00
Exempt multicast addresses from five-second neighbor lifetime
2020-11-24 13:28:56 +01:00
net: make get_net_ns return error if NET_NS is disabled
2021-06-23 14:41:25 +02:00
ipv6: fix suspecious RCU usage warning
2021-03-30 14:35:25 +02:00
mm: fix struct page layout on 32-bit systems
2021-05-19 10:08:31 +02:00
net_sched: fix ops->bind_class() implementations
2020-02-01 09:34:38 +00:00
net: sched: fix tx action rescheduling issue during deactivation
2021-06-03 08:59:13 +02:00
sch_red: fix off-by-one checks in red_check_params()
2021-04-14 08:24:14 +02:00
can: dev: Move device back to init netns on owning netns delete
2021-03-30 14:35:29 +02:00
net: sched: add barrier to ensure correct ordering for lockless qdisc
2021-07-14 16:53:31 +02:00
inet: annotate date races around sk->sk_txhash
2021-06-30 08:47:47 -04:00
tcp: fix SO_RCVLOWAT related hangs under mem pressure
2021-03-04 10:26:17 +01:00
net/tls: Protect from calling tls_dev_del for TLS RX twice
2020-12-08 10:40:23 +01:00
udp: document udp_rcv_segment special case for looped packets
2020-05-10 10:31:33 +02:00
xfrm: xfrm_state_mtu should return at least 1280 for ipv6
2021-07-14 16:53:26 +02:00
03a5e45461