a7y18lte-ubports/android_kernel_samsung_a7y18lte
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
677b949e7b
android_kernel_samsung_a7y1.../net
History
Willem de Bruijn e14d13d96f packet: validate msg_namelen in send directly 
[ Upstream commit 486efdc8f6ce802b27e15921d2353cc740c55451 ]

Packet sockets in datagram mode take a destination address. Verify its
length before passing to dev_hard_header.

Prior to 2.6.14-rc3, the send code ignored sll_halen. This is
established behavior. Directly compare msg_namelen to dev->addr_len.

Change v1->v2: initialize addr in all paths

Fixes: 6b8d95f1795c4 ("packet: validate address length if non-zero")
Suggested-by: David Laight <David.Laight@aculab.com>
Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-04-06 16:41:57 +02:00
..
6lowpan A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
9p 9p: do not trust pdu content for stat item size 2020-04-06 15:20:01 +02:00
802 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
8021q A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
appletalk appletalk: Fix use-after-free in atalk_proc_exit 2020-04-06 15:20:39 +02:00
atm net: atm: Fix potential Spectre v1 vulnerabilities 2020-04-06 15:28:29 +02:00
ax25 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
batman-adv A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
bluetooth Bluetooth: Fix decrementing reference count twice in releasing socket 2020-04-06 14:19:03 +02:00
bridge netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING 2020-04-06 16:41:11 +02:00
caif A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
can A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ceph A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
core bpf: reject wrong sized filters earlier 2020-04-06 16:40:41 +02:00
dcb A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
dccp dccp: do not use ipv6 header for ipv4 flow 2020-04-06 12:57:00 +02:00
decnet A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
dns_resolver A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
dsa A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ethernet A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
hsr A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ieee802154 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ipv4 ipv4: ip_do_fragment: Preserve skb_iif during fragmentation 2020-04-06 16:41:50 +02:00
ipv6 ipv6: invert flowlabel sharing check in process and user mode 2020-04-06 16:41:53 +02:00
ipx A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
irda A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
iucv A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
key A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
l2tp A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
l3mdev A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
lapb A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
llc A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
mac80211 mac80211: do not call driver wake_tx_queue op during reconfig 2020-04-06 15:57:06 +02:00
mac802154 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
mpls A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
mptcp A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ncm A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
netfilter netfilter: physdev: relax br_netfilter dependency 2020-04-06 14:52:27 +02:00
netlabel A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
netlink A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
netrom A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
nfc A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
openvswitch openvswitch: fix flow actions reallocation 2020-04-06 15:07:42 +02:00
packet packet: validate msg_namelen in send directly 2020-04-06 16:41:57 +02:00
phonet A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
rds net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock(). 2020-04-06 15:07:40 +02:00
rfkill A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
rose net: rose: fix a possible stack overflow 2020-04-06 12:57:06 +02:00
rxrpc A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sched A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sctp sctp: initialize _pad of sockaddr_in before copying to user memory 2020-04-06 15:07:47 +02:00
sunrpc sunrpc: don't mark uninitialised items as VALID. 2020-04-06 16:38:50 +02:00
switchdev A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tipc tipc: check link name with right length in tipc_nl_compat_link_set 2020-04-06 16:40:39 +02:00
unix A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
vmw_vsock A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
wimax A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
wireless cfg80211: size various nl80211 messages correctly 2020-04-06 12:56:56 +02:00
x25 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
xfrm A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
compat.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Kconfig A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Makefile A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
socket.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sysctl_net.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30