android_kernel_samsung_a7y1.../net/ipv4
Steffen Klassert d5d5f1684e xfrm4: Fix uninitialized memory read in _decode_session4
[ Upstream commit 8742dc86d0c7a9628117a989c11f04a9b6b898f3 ]

We currently don't reload pointers pointing into skb header
after doing pskb_may_pull() in _decode_session4(). So in case
pskb_may_pull() changed the pointers, we read from random
memory. Fix this by putting all the needed infos on the
stack, so that we don't need to access the header pointers
after doing pskb_may_pull().

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-04-06 18:14:35 +02:00
..
netfilter A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
af_inet.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ah4.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
arp.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
cipso_ipv4.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
datagram.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
devinet.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
esp4.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
fib_frontend.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
fib_lookup.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
fib_rules.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
fib_semantics.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
fib_trie.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
fou.c net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv 2020-04-06 15:28:33 +02:00
gre_demux.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
gre_offload.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
icmp.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
igmp.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
inet_connection_sock.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
inet_diag.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
inet_fragment.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
inet_hashtables.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
inet_lro.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
inet_timewait_sock.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
inetpeer.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ip_forward.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ip_fragment.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ip_gre.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ip_input.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ip_options.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ip_output.c ipv4: ip_do_fragment: Preserve skb_iif during fragmentation 2020-04-06 16:41:50 +02:00
ip_sockglue.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ip_tunnel_core.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ip_tunnel.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ip_vti.c vti4: ipip tunnel deregistration fixes. 2020-04-06 18:14:33 +02:00
ipcomp.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ipconfig.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ipip.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ipmr.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Kconfig A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Makefile A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
netfilter.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ping.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
proc.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
protocol.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
raw.c ipv4: Fix raw socket lookup for local traffic 2020-04-06 17:01:41 +02:00
route.c ipv4: add sanity checks in ipv4_link_failure() 2020-04-06 16:40:44 +02:00
syncookies.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sysctl_net_ipv4.c ipv4: set the tcp_min_rtt_wlen range from 0 to one day 2020-04-06 16:40:50 +02:00
sysfs_net_ipv4.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_bic.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_cdg.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_cong.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_cubic.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_dctcp.c tcp: Ensure DCTCP reacts to losses 2020-04-06 15:07:51 +02:00
tcp_diag.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_fastopen.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_highspeed.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_htcp.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_hybla.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_illinois.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_input.c tcp: tcp_grow_window() needs to respect tcp_space() 2020-04-06 15:47:28 +02:00
tcp_ipv4.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_lp.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_memcontrol.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_metrics.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_minisocks.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_offload.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_output.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_probe.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_recovery.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_scalable.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_timer.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_vegas.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_vegas.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_veno.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_westwood.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp_yeah.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tcp.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tunnel4.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
udp_diag.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
udp_impl.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
udp_offload.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
udp_tunnel.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
udp.c net : disable KNOX_NCM 2020-03-27 22:13:21 +05:30
udplite.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
xfrm4_input.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
xfrm4_mode_beet.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
xfrm4_mode_transport.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
xfrm4_mode_tunnel.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
xfrm4_output.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
xfrm4_policy.c xfrm4: Fix uninitialized memory read in _decode_session4 2020-04-06 18:14:35 +02:00
xfrm4_protocol.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
xfrm4_state.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
xfrm4_tunnel.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30