Eric Dumazet
25888e3031
af_unix: limit recursion level ...
Its easy to eat all kernel memory and trigger NMI watchdog, using an
exploit program that queues unix sockets on top of others.
lkml ref : http://lkml.org/lkml/2010/11/25/8
This mechanism is used in applications, one choice we have is to have a
recursion limit.
Other limits might be needed as well (if we queue other types of files),
since the passfd mechanism is currently limited by socket receive queue
sizes only.
Add a recursion_level to unix socket, allowing up to 4 levels.
Each time we send an unix socket through sendfd mechanism, we copy its
recursion level (plus one) to receiver. This recursion level is cleared
when socket receive queue is emptied.
Reported-by: Марк Коренберг <socketpair@gmail.com>
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2010-11-29 09:45:15 -08:00
9p: Add datasync to client side TFSYNC/RFSYNC for dotl
2010-10-28 09:08:49 -05:00
Bluetooth: clean up rfcomm code
2010-10-12 12:44:53 -03:00
caif: SPI-driver bugfix - incorrect padding.
2010-11-03 18:50:03 -07:00
net: return operator cleanup
2010-09-23 14:33:39 -07:00
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6
2010-10-23 11:47:02 -07:00
netns: reorder fields in struct net
2010-10-17 13:49:14 -07:00
Phonet: 'connect' socket implementation for Pipe controller
2010-10-13 14:40:34 -07:00
net: return operator cleanup
2010-09-23 14:33:39 -07:00
net/sched: add ACT_CSUM action to update packets checksums
2010-08-20 01:42:59 -07:00
tipc: cleanup function namespace
2010-10-16 11:13:24 -07:00
pkt_sched: gen_kill_estimator() rcu fixes
2010-06-11 18:37:08 -07:00
ipv6: make __ipv6_isatap_ifid static
2010-10-05 00:47:39 -07:00
af_unix: limit recursion level
2010-11-29 09:45:15 -08:00
arp: remove unnecessary export of arp_broken_ops
2010-09-29 19:45:35 -07:00
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
cfg80211: fix WIPHY_FLAG_IBSS_RSN bit
2010-11-15 15:00:42 -05:00
Merge commit 'v2.6.36-rc7' into core/rcu
2010-10-07 09:43:45 +02:00
net: fix compat_sys_recvmmsg parameter type
2009-12-11 15:07:56 -08:00
net: avoid limits overflow
2010-11-10 12:12:00 -08:00
net: use __packed annotation
2010-06-03 03:21:52 -07:00
decnet: Remove unused FIB metric macros.
2010-03-27 19:23:46 -07:00
net: use __packed annotation
2010-06-03 03:21:52 -07:00
net-next: remove useless union keyword
2010-06-10 23:31:35 -07:00
ipv4: add __rcu annotations to routes.c
2010-10-27 11:37:31 -07:00
b43legacy: Fix compile on ARM architecture
2010-11-15 15:00:42 -05:00
fib_rules: __rcu annotates ctarget
2010-10-27 11:37:32 -07:00
ipv4: Allow configuring subnets as local addresses
2010-09-28 23:38:15 -07:00
net/802: add __rcu annotations
2010-10-25 13:09:44 -07:00
genetlink: introduce pre_doit/post_doit hooks
2010-10-05 13:35:30 -04:00
PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)
2010-08-21 23:05:39 -07:00
ipv4: raw: move struct raw_sock and raw_sk() to include/net/raw.h
2010-04-13 14:49:31 -07:00
wireless: update radiotap parser
2010-02-08 16:50:53 -05:00
ipv6: Replace inet6_ifaddr->dead with state
2010-05-18 15:36:06 -07:00
net: replace ipfragok with skb->local_df
2010-04-15 23:36:37 -07:00
tcp: Fix a connect() race with timewait sockets
2009-12-08 20:17:51 -08:00
inet, inet6: make tcp_sendmsg() and tcp_sendpage() through inet_sendmsg() and inet_sendpage()
2010-07-12 20:21:46 -07:00
tcp: Add TCP_USER_TIMEOUT socket option.
2010-08-30 13:23:33 -07:00
net: return operator cleanup
2010-09-23 14:33:39 -07:00
fragment: add fast path for in-order fragments
2010-06-30 13:44:29 -07:00
tproxy: fix hash locking issue when using port redirection in __inet_inherit_port()
2010-10-21 13:06:43 +02:00
net - IP_NODEFRAG option for IPv4 socket
2010-06-23 13:16:38 -07:00
net: suppress RCU lockdep false positive in twsk_net()
2010-04-27 12:39:01 -07:00
inetpeer: __rcu annotations
2010-10-27 11:37:33 -07:00
ipv4: add __rcu annotations to ip_ra_chain
2010-10-25 14:18:28 -07:00
net-next: remove useless union keyword
2010-06-10 23:31:35 -07:00
net: sk_dst_cache RCUification
2010-04-13 01:41:33 -07:00
tunnels: add _rcu annotations
2010-10-25 13:09:45 -07:00
fib: Fix fib zone and its hash leak on namespace stop
2010-10-28 10:27:03 -07:00
ipvs: provide address family for debugging
2010-10-21 11:04:43 +02:00
percpu: add __percpu sparse annotations to net
2010-02-16 23:05:38 -08:00
tunnels: add __rcu annotations
2010-10-27 11:37:32 -07:00
net: return operator cleanup
2010-09-23 14:33:39 -07:00
net: use __packed annotation
2010-06-03 03:21:52 -07:00
include/net/iw_handler.h: Use SIOCIWFIRST not SIOCSIWCOMMIT in comment
2010-03-31 14:49:12 -04:00
lib80211: remove unused host_build_iv option
2010-07-26 15:09:04 -04:00
llc: convert llc_sap_list to RCU
2009-12-26 20:46:28 -08:00
llc: use a device based hash table to speed up multicast delivery
2009-12-26 20:43:57 -08:00
mac80211: add probe request filter flag
2010-10-13 15:45:22 -04:00
net: use __packed annotation
2010-06-03 03:21:52 -07:00
ipv6 mcast: Introduce include/net/mld.h for MLD definitions.
2010-04-23 13:35:55 +09:00
net: use __packed annotation
2010-06-03 03:21:52 -07:00
net: Fix duplicate volatile warning.
2010-11-18 09:40:04 -08:00
net_ns: add __rcu annotations
2010-10-25 14:18:27 -07:00
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
netlink: Make nlmsg_find_attr take a const nlmsghdr*.
2010-11-04 12:26:34 -07:00
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
net: rename skb->iif to skb->skb_iif
2009-11-20 15:35:04 -08:00
net: Define accessors to manipulate QDISC_STATE_RUNNING
2010-06-02 03:23:51 -07:00
net: add __rcu annotations to protocol
2010-10-27 11:37:31 -07:00
include/net/raw.h: Convert raw_seq_private macro to inline
2010-09-08 13:42:22 -07:00
wireless: only use alpha2 regulatory information from country IE
2010-07-20 16:44:35 -04:00
tcp: account SYN-ACK timeouts & retransmissions
2010-01-17 19:09:39 -08:00
tproxy: check for transparent flag in ip_route_newports
2010-09-27 15:03:33 -07:00
rtnetlink: remove rtnl_kill_links
2010-10-21 03:09:45 -07:00
net_sched: remove the unused parameter of qdisc_create_dflt()
2010-10-21 03:09:47 -07:00
scm: Capture the full credentials of the scm sender.
2010-06-16 14:55:56 -07:00
snmp: 64bit ipstats_mib for all arches
2010-06-30 13:31:19 -07:00
net: avoid limits overflow
2010-11-10 12:12:00 -08:00
net: avoid limits overflow
2010-11-10 12:12:00 -08:00
IPv6: Add dontfrag argument to relevant functions
2010-04-23 23:35:28 -07:00
net: avoid limits overflow
2010-11-10 12:12:00 -08:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial
2009-12-09 19:43:33 -08:00
X25: Move accept approve flag to bitfield
2010-05-17 17:39:27 -07:00
X25: Add if_x25.h and x25 to device identifiers
2010-04-22 16:12:36 -07:00
tunnels: add __rcu annotations
2010-10-27 11:37:32 -07:00
25888e3031