Wei Yongjun
9fcb95a105
sctp: Avoid memory overflow while FWD-TSN chunk is received with bad stream ID ...
If FWD-TSN chunk is received with bad stream ID, the sctp will not do the
validity check, this may cause memory overflow when overwrite the TSN of
the stream ID.
The FORWARD-TSN chunk is like this:
FORWARD-TSN chunk
Type = 192
Flags = 0
Length = 172
NewTSN = 99
Stream = 10000
StreamSequence = 0xFFFF
This patch fix this problem by discard the chunk if stream ID is not
less than MIS.
Signed-off-by: Wei Yongjun <yjwei@cn.fujitsu.com>
Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-12-25 16:58:11 -08:00
net: remove redundant argument comments
2008-11-21 17:15:03 -08:00
hippi: convert driver to net_device_ops
2008-11-20 20:32:15 -08:00
vlan: fix convertion to net_device_ops
2008-12-25 16:45:19 -08:00
netdevice: safe convert to netdev_priv() #part-4
2008-11-12 23:39:10 -08:00
netdevice: Kill netdev->priv
2008-12-08 01:14:16 -08:00
ax25: join the return paths that free skb
2008-12-14 23:17:26 -08:00
Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6
2008-12-23 17:56:23 -08:00
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6
2008-11-28 02:19:15 -08:00
can: merge error paths
2008-12-14 23:16:58 -08:00
net: Fix oops in dev_ifsioc()
2008-12-22 19:35:28 -08:00
net: add DCNA attribute to the BCN interface for DCB
2008-12-21 20:10:29 -08:00
dccp_diag: LISTEN sockets don't have CCIDs
2008-12-17 16:08:01 -08:00
net: Make static
2008-12-10 15:18:31 -08:00
net: Make static
2008-12-10 15:18:31 -08:00
eth: Declare an optimized compare_ether_addr_64bits() function
2008-11-23 23:24:32 -08:00
netns: igmp: make /proc/net/{igmp,mcfilter} per netns
2008-12-25 16:42:51 -08:00
ipv6: fix the outgoing interface selection order in udpv6_sendmsg()
2008-12-16 02:08:29 -08:00
net: '&' redux
2008-11-03 18:21:05 -08:00
irda: merge exit paths
2008-12-14 23:18:30 -08:00
netns PF_KEY: per-netns /proc/pfkey
2008-11-25 17:59:00 -08:00
net: remove redundant argument comments
2008-11-21 17:15:03 -08:00
mac80211: implement dynamic power save
2008-12-19 15:24:00 -05:00
Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6
2008-12-15 20:03:50 -08:00
Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6
2008-12-15 20:03:50 -08:00
netlink: allow empty nested attributes
2008-11-28 03:05:19 -08:00
net: '&' redux
2008-11-03 18:21:05 -08:00
net: Make sure BHs are disabled in sock_prot_inuse_add()
2008-11-24 00:09:29 -08:00
Phonet: get rid of deferred work on the transmission path
2008-12-17 15:48:50 -08:00
rfkill: strip pointless notifier chain
2008-12-12 14:45:25 -05:00
Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6
2008-11-26 23:48:40 -08:00
net: Make static
2008-12-10 15:18:31 -08:00
pkt_sched: Remove smp_wmb() in qdisc_watchdog()
2008-12-22 19:44:13 -08:00
sctp: Avoid memory overflow while FWD-TSN chunk is received with bad stream ID
2008-12-25 16:58:11 -08:00
Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6
2008-12-15 20:03:50 -08:00
tipc: trivial endian annotation in debug statement
2008-11-07 23:37:50 -08:00
Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6
2008-12-02 19:50:27 -08:00
netdevice wanrouter: Convert directly reference of netdev->priv
2008-11-20 04:26:21 -08:00
mac80211: Fix HT channel selection
2008-12-19 15:22:54 -05:00
net: '&' redux
2008-11-03 18:21:05 -08:00
Revert "xfrm: Accept ESP packets regardless of UDP encapsulation mode"
2008-12-18 22:27:37 -08:00
reintroduce accept4
2008-11-19 18:49:57 -08:00
net/ieee80211 -> drivers/net/ipw2x00/libipw_* rename
2008-11-21 11:08:18 -05:00
DCB: fix kconfig option
2008-11-25 01:02:08 -08:00
Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6
2008-12-23 17:56:23 -08:00
9fcb95a105