Matthew Daley 7f81e25bef x25: Prevent skb overreads when checking call user data ...

x25_find_listener does not check that the amount of call user data given
in the skb is big enough in per-socket comparisons, hence buffer
overreads may occur.  Fix this by adding a check.

Signed-off-by: Matthew Daley <mattjd@gmail.com>
Cc: Eric Dumazet <eric.dumazet@gmail.com>
Cc: Andrew Hendry <andrew.hendry@gmail.com>
Cc: stable <stable@kernel.org>
Acked-by: Andrew Hendry <andrew.hendry@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2011-10-17 19:31:40 -04:00

..

af_x25.c

x25: Prevent skb overreads when checking call user data

2011-10-17 19:31:40 -04:00

Kconfig

x25: remove the BKL

2011-03-05 10:55:45 +01:00

Makefile

…

sysctl_net_x25.c

sysctl net: Remove unused binary sysctl code

2009-11-12 02:05:06 -08:00

x25_dev.c

x25: Handle undersized/fragmented skbs

2011-10-17 19:31:39 -04:00

x25_facilities.c

x25: Handle undersized/fragmented skbs

2011-10-17 19:31:39 -04:00

x25_forward.c

Fix common misspellings

2011-03-31 11:26:23 -03:00

x25_in.c

x25: Handle undersized/fragmented skbs

2011-10-17 19:31:39 -04:00

x25_link.c

x25: Handle undersized/fragmented skbs

2011-10-17 19:31:39 -04:00

x25_out.c

x25: remove the BKL

2011-03-05 10:55:45 +01:00

x25_proc.c

net: x25: use seq_list_foo() helpers

2010-02-10 11:12:10 -08:00

x25_route.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

x25_subr.c

x25: Handle undersized/fragmented skbs

2011-10-17 19:31:39 -04:00

x25_timer.c

x25: Fix sleep from timer on socket destroy.

2009-06-16 05:40:30 -07:00