Davide Caratti
804ec7ebe8
sctp: fix ICMP processing if skb is non-linear
...
sometimes ICMP replies to INIT chunks are ignored by the client, even if
the encapsulated SCTP headers match an open socket. This happens when the
ICMP packet is carried by a paged skb: use skb_header_pointer() to read
packet contents beyond the SCTP header, so that chunk header and initiate
tag are validated correctly.
v2:
- don't use skb_header_pointer() to read the transport header, since
icmp_socket_deliver() already puts these 8 bytes in the linear area.
- change commit message to make specific reference to INIT chunks.
Signed-off-by: Davide Caratti <dcaratti@redhat.com>
Acked-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Acked-by: Vlad Yasevich <vyasevich@gmail.com>
Reviewed-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2017-05-26 14:40:46 -04:00
..
associola.c
sctp: fix stream update when processing dupcookie
2017-05-24 15:21:04 -04:00
auth.c
sctp: use IS_ENABLED() instead of checking for built-in or module
2016-09-10 21:19:11 -07:00
bind_addr.c
sctp: not copying duplicate addrs to the assoc's bind address list
2016-12-20 14:15:45 -05:00
chunk.c
sctp: add SCTP_PR_STREAM_STATUS sockopt for prsctp
2017-04-03 14:52:35 -07:00
debug.c
net: sctp: fix array overrun read on sctp_timer_tbl
2017-01-24 15:24:35 -05:00
endpointola.c
sctp: add reconf_enable in asoc ep and netns
2017-01-18 14:55:10 -05:00
input.c
sctp: fix ICMP processing if skb is non-linear
2017-05-26 14:40:46 -04:00
inqueue.c
sctp: rename WORD_TRUNC/ROUND macros
2016-09-22 03:13:26 -04:00
ipv6.c
sctp: do not inherit ipv6_{mc|ac|fl}_list from parent
2017-05-18 10:24:08 -04:00
Kconfig
sctp: add the sctp_diag.c file
2016-04-15 17:29:36 -04:00
Makefile
sctp: prepare asoc stream for stream reconf
2017-01-06 21:07:26 -05:00
objcnt.c
sctp: prepare asoc stream for stream reconf
2017-01-06 21:07:26 -05:00
offload.c
sctp: sctp gso should set feature with NETIF_F_SG when calling skb_segment
2017-01-25 12:28:33 -05:00
output.c
sctp: get sock from transport in sctp_transport_update_pmtu
2017-04-05 07:20:06 -07:00
outqueue.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-04-06 08:24:51 -07:00
primitive.c
sctp: add stream reconf primitive
2017-01-18 14:55:10 -05:00
probe.c
proc.c
sctp: use right in and out stream cnt
2017-04-01 20:12:30 -07:00
protocol.c
net: Work around lockdep limitation in sockets that use sockets
2017-03-09 18:23:27 -08:00
sctp_diag.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2016-10-02 22:20:41 -04:00
sm_make_chunk.c
sctp: set new_asoc temp when processing dupcookie
2017-05-24 15:21:04 -04:00
sm_sideeffect.c
sctp: flush out queue once assoc state falls into SHUTDOWN_PENDING
2017-02-20 10:26:09 -05:00
sm_statefuns.c
sctp: set new_asoc temp when processing dupcookie
2017-05-24 15:21:04 -04:00
sm_statetable.c
sctp: add reconf chunk event
2017-02-19 18:17:59 -05:00
socket.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-04-15 21:16:30 -04:00
stream.c
sctp: process duplicated strreset asoc request correctly
2017-04-18 13:39:50 -04:00
sysctl.c
sctp: add get and set sockopt for reconf_enable
2017-03-12 23:22:24 -07:00
transport.c
sctp: get sock from transport in sctp_transport_update_pmtu
2017-04-05 07:20:06 -07:00
tsnmap.c
ulpevent.c
sctp: add support for generating add stream change event notification
2017-03-12 23:22:23 -07:00
ulpqueue.c
sctp: prepare asoc stream for stream reconf
2017-01-06 21:07:26 -05:00