Willem de Bruijn 938990d243 udp: consistently apply ufo or fragmentation ... [ Upstream commit 85f1bd9a7b5a79d5baa8bf44af19658f7bf77bfa ] When iteratively building a UDP datagram with MSG_MORE and that datagram exceeds MTU, consistently choose UFO or fragmentation. Once skb_is_gso, always apply ufo. Conversely, once a datagram is split across multiple skbs, do not consider ufo. Sendpage already maintains the first invariant, only add the second. IPv6 does not have a sendpage implementation to modify. A gso skb must have a partial checksum, do not follow sk_no_check_tx in udp_send_skb. Found by syzkaller. Fixes: e89e9cf539 ("[IPv4/IPv6]: UFO Scatter-gather approach") Reported-by: Andrey Konovalov <andreyknvl@google.com> Signed-off-by: Willem de Bruijn <willemb@google.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2017-08-12 19:29:09 -07:00
..
6lowpan
9p	p9_client_readdir() fix	2017-05-02 21:19:55 -07:00
802
8021q	vlan: Propagate MAC address to VLANs	2017-08-06 19:19:43 -07:00
appletalk
atm
ax25	ax25: Fix segfault after sock connection timeout	2017-02-04 09:45:09 +01:00
batman-adv	batman-adv: Check for alloc errors when preparing TT local data	2016-12-15 08:49:23 -08:00
bluetooth	Bluetooth: use constant time memory comparison for secret values	2017-07-27 15:06:04 -07:00
bridge	net: bridge: start hello timer only if device is up	2017-06-14 13:16:19 +02:00
caif	net: caif: Fix a sleep-in-atomic bug in cfpkt_create_pfx	2017-07-05 14:37:14 +02:00
can	can: Fix kernel panic at security_sock_rcv_skb	2017-02-18 16:39:26 +01:00
ceph	libceph: force GFP_NOIO for socket allocations	2017-04-08 09:53:30 +02:00
core	net: avoid skb_warn_bad_offload false positives on UFO	2017-08-12 19:29:08 -07:00
dcb
dccp	dccp: fix a memleak for dccp_feat_init err process	2017-08-11 09:08:54 -07:00
decnet	decnet: always not take dst->__refcnt when inserting dst into hash table	2017-07-05 14:37:14 +02:00
dns_resolver
dsa	net: dsa: Check return value of phy_connect_direct()	2017-07-05 14:37:19 +02:00
ethernet	net: introduce device min_header_len	2017-02-18 16:39:27 +01:00
hsr
ieee802154
ipv4	udp: consistently apply ufo or fragmentation	2017-08-12 19:29:09 -07:00
ipv6	udp: consistently apply ufo or fragmentation	2017-08-12 19:29:09 -07:00
ipx	ipx: call ipxitf_put() in ioctl error path	2017-05-25 14:30:13 +02:00
irda	irda: Fix lockdep annotations in hashbin_delete().	2017-02-26 11:07:50 +01:00
iucv	af_iucv: Validate socket address length in iucv_sock_bind()	2016-03-03 15:07:03 -08:00
key	af_key: Add lock to key dump	2017-08-06 19:19:38 -07:00
l2tp	l2tp: fix PPP pseudo-wire auto-loading	2017-05-02 21:19:52 -07:00
l3mdev
lapb
llc	net/llc: avoid BUG_ON() in skb_orphan()	2017-02-26 11:07:49 +01:00
mac80211	mac80211: initialize SMPS field in HT capabilities	2017-07-05 14:37:20 +02:00
mac802154
mpls	mpls: Send route delete notifications when router module is unloaded	2017-03-22 12:04:16 +01:00
netfilter	ipvs: SNAT packet replies only for NATed connections	2017-07-27 15:06:05 -07:00
netlabel	netlabel: add address family checks to netlbl_{sock,req}_delattr()	2016-08-20 18:09:22 +02:00
netlink	netlink: Allow direct reclaim for fallback allocation	2017-05-08 07:46:02 +02:00
netrom
nfc	NFC: Add sockaddr length checks before accessing sa_family in bind handlers	2017-07-27 15:06:03 -07:00
openvswitch	openvswitch: fix potential out of bound access in parse_ct	2017-08-11 09:08:53 -07:00
packet	packet: fix tp_reserve race in packet_set_ring	2017-08-12 19:29:08 -07:00
phonet	phonet: properly unshare skbs in phonet_rcv()	2016-01-31 11:29:00 -08:00
rds	rds: tcp: use sock_create_lite() to create the accept socket	2017-07-21 07:44:55 +02:00
rfkill	rfkill: fix rfkill_fop_read wait_event usage	2016-03-03 15:07:26 -08:00
rose
rxrpc	rxrpc: Fix several cases where a padded len isn't checked in ticket decode	2017-06-29 12:48:52 +02:00
sched	net: sched: set xt_tgchk_param par.nft_compat as 0 in ipt_init_target	2017-08-12 19:29:08 -07:00
sctp	sctp: check af before verify address in sctp_addr_id2transport	2017-07-05 14:37:21 +02:00
sunrpc	SUNRPC: fix refcounting problems with auth_gss messages.	2017-04-21 09:30:08 +02:00
switchdev	switchdev: pass pointer to fib_info instead of copy	2016-06-24 10:18:16 -07:00
tipc	tipc: ignore requests when the connection state is not CONNECTED	2017-06-17 06:39:38 +02:00
unix	af_unix: Add sockaddr length checks before accessing sa_family in bind and connect handlers	2017-07-05 14:37:13 +02:00
vmw_vsock	VSOCK: Detach QP check should filter out non matching QPs.	2017-04-27 09:09:32 +02:00
wimax
wireless	cfg80211: Check if PMKID attribute is of expected size	2017-07-21 07:44:56 +02:00
x25	net: fix a kernel infoleak in x25 module	2016-05-18 17:06:43 -07:00
xfrm	xfrm: Don't use sk_family for socket policy lookups	2017-08-06 19:19:46 -07:00
compat.c
Kconfig
Makefile
socket.c	net: socket: fix recvmmsg not returning error from sock_error	2017-02-26 11:07:50 +01:00
sysctl_net.c	net: Use ns_capable_noaudit() when determining net sysctl permissions	2016-09-15 08:27:50 +02:00