Patrick McHardy a50436f2cd net: ipmr/ip6mr: fix potential out-of-bounds vif_table access ...

mfc_parent of cache entries is used to index into the vif_table and is
initialised from mfcctl->mfcc_parent. This can take values of to 2^16-1,
while the vif_table has only MAXVIFS (32) entries. The same problem
affects ip6mr.

Refuse invalid values to fix a potential out-of-bounds access. Unlike
the other validity checks, this is checked in ipmr_mfc_add() instead of
the setsockopt handler since its unused in the delete path and might be
uninitialized.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2010-03-19 22:47:22 -07:00

..

netfilter

netfilter: xtables: restore indentation

2010-02-26 17:53:31 +01:00

af_inet.c

percpu: add __percpu sparse annotations to net

2010-02-16 23:05:38 -08:00

ah4.c

xfrm: SA lookups signature with mark

2010-02-22 16:20:22 -08:00

arp.c

net neigh: Decouple per interface neighbour table controls from binary sysctls

2010-02-16 15:55:18 -08:00

cipso_ipv4.c

ipv4: Define cipso_v4_delopt static

2009-10-07 14:45:58 -07:00

datagram.c

inet: rename some inet_sock fields

2009-10-18 18:52:53 -07:00

devinet.c

Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6

2010-02-25 23:22:42 -08:00

esp4.c

xfrm: SA lookups signature with mark

2010-02-22 16:20:22 -08:00

fib_frontend.c

net: spread __net_init, __net_exit

2010-01-17 19:16:02 -08:00

fib_hash.c

ipv4: fib table algorithm performance improvement

2009-10-05 00:21:56 -07:00

fib_lookup.h

ipv4: cleanup - remove two unused parameters from fib_semantic_match().

2009-05-18 15:16:37 -07:00

fib_rules.c

net: Allow fib_rule_unregister to batch

2009-12-03 12:22:55 -08:00

fib_semantics.c

ipv4: obsolete config in kernel source (IP_ROUTE_PERVASIVE)

2010-02-04 14:58:46 -08:00

fib_trie.c

ipv4: fib table algorithm performance improvement

2009-10-05 00:21:56 -07:00

icmp.c

icmp: move icmp_err_convert[] to .rodata

2010-01-23 01:21:28 -08:00

igmp.c

Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6

2010-02-14 22:30:54 -08:00

inet_connection_sock.c

tcp: account SYN-ACK timeouts & retransmissions

2010-01-17 19:09:39 -08:00

inet_diag.c

netlink: With opcode INET_DIAG_BC_S_LE dport was compared in inet_diag_bc_run()

2010-01-19 14:12:20 -08:00

inet_fragment.c

inet fragments: fix sparse warning: context imbalance

2009-02-26 23:13:35 -08:00

inet_hashtables.c

tcp: Fix a connect() race with timewait sockets

2009-12-08 20:17:51 -08:00

inet_lro.c

net/ipv4: Move && and || to end of previous line

2009-11-23 10:41:23 -08:00

inet_timewait_sock.c

[PATCH] tcp: documents timewait refcnt tricks

2009-12-08 20:19:53 -08:00

inetpeer.c

inetpeer: Optimize inet_getid()

2009-11-13 20:46:58 -08:00

ip_forward.c

net: skb->dst accessors

2009-06-03 02:51:04 -07:00

ip_fragment.c

ipv4: ip_fragment: fix unbalanced rcu_read_unlock()

2010-02-02 11:46:50 -08:00

ip_gre.c

gre: fix hard header destination address checking

2010-03-04 00:53:52 -08:00

ip_input.c

net: use net_eq to compare nets

2009-11-25 15:14:13 -08:00

ip_options.c

net: skb->dst accessors

2009-06-03 02:51:04 -07:00

ip_output.c

ip: fix mc_loop checks for tunnels with multicast outer addresses

2010-01-06 20:37:01 -08:00

ip_sockglue.c

tcp: Generalized TTL Security Mechanism

2010-01-11 16:28:01 -08:00

ipcomp.c

xfrm: SA lookups signature with mark

2010-02-22 16:20:22 -08:00

ipconfig.c

ipconfig: Handle devices which take some time to come up.

2010-03-12 00:00:17 -08:00

ipip.c

tunnels: fix netns vs proto registration ordering

2010-02-16 14:55:25 -08:00

ipmr.c

net: ipmr/ip6mr: fix potential out-of-bounds vif_table access

2010-03-19 22:47:22 -07:00

Kconfig

nfs: new subdir Documentation/filesystems/nfs

2009-10-27 19:34:04 -04:00

Makefile

…

netfilter.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6

2009-12-08 07:55:01 -08:00

proc.c

tcp: Add SNMP counters for backlog and min_ttl drops

2010-03-08 10:45:27 -08:00

protocol.c

net: constify struct net_protocol

2009-09-14 17:03:01 -07:00

raw.c

Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6

2009-10-29 21:28:59 -07:00

route.c

ipv4: check rt_genid in dst_check

2010-03-19 21:00:41 -07:00

syncookies.c

net: Add rtnetlink init_rcvwnd to set the TCP initial receive window

2009-12-23 14:13:30 -08:00

sysctl_net_ipv4.c

net: TCP thin dupack

2010-02-18 15:43:09 -08:00

tcp_bic.c

tcp: add helper for AI algorithm

2009-03-02 03:00:15 -08:00

tcp_cong.c

Networking: use CAP_NET_ADMIN when deciding to call request_module

2009-08-14 11:18:34 +10:00

tcp_cubic.c

tcp: add helper for AI algorithm

2009-03-02 03:00:15 -08:00

tcp_diag.c

tcp: diag: Dont report negative values for rx queue

2009-12-03 16:06:13 -08:00

tcp_highspeed.c

…

tcp_htcp.c

net/ipv4: Move && and || to end of previous line

2009-11-23 10:41:23 -08:00

tcp_hybla.c

…

tcp_illinois.c

…

tcp_input.c

net: TCP thin dupack

2010-02-18 15:43:09 -08:00

tcp_ipv4.c

TCP: check min TTL on received ICMP packets

2010-03-19 21:00:42 -07:00

tcp_lp.c

net/ipv4: Move && and || to end of previous line

2009-11-23 10:41:23 -08:00

tcp_minisocks.c

net: backlog functions rename

2010-03-05 13:34:03 -08:00

tcp_output.c

tcp: Fix tcp_make_synack()

2010-03-08 11:32:01 -08:00

tcp_probe.c

tcp_probe: avoid modulus operation and wrap fix

2010-01-25 15:47:50 -08:00

tcp_scalable.c

tcp: add helper for AI algorithm

2009-03-02 03:00:15 -08:00

tcp_timer.c

Merge branch 'for-next' into for-linus

2010-03-08 16:55:37 +01:00

tcp_vegas.c

tcp: tcp_vegas ssthresh bugfix

2009-05-25 22:44:59 -07:00

tcp_vegas.h

…

tcp_veno.c

net/ipv4: Move && and || to end of previous line

2009-11-23 10:41:23 -08:00

tcp_westwood.c

…

tcp_yeah.c

net/ipv4: Move && and || to end of previous line

2009-11-23 10:41:23 -08:00

tcp.c

tcp: Fix OOB POLLIN avoidance.

2010-03-18 20:29:24 -07:00

tunnel4.c

net: constify struct net_protocol

2009-09-14 17:03:01 -07:00

udp_impl.h

net: Make setsockopt() optlen be unsigned.

2009-09-30 16:12:20 -07:00

udp.c

net: backlog functions rename

2010-03-05 13:34:03 -08:00

udplite.c

net: spread __net_init, __net_exit

2010-01-17 19:16:02 -08:00

xfrm4_input.c

net: skb->dst accessors

2009-06-03 02:51:04 -07:00

xfrm4_mode_beet.c

…

xfrm4_mode_transport.c

…

xfrm4_mode_tunnel.c

net: skb->dst accessors

2009-06-03 02:51:04 -07:00

xfrm4_output.c

net: skb->dst accessors

2009-06-03 02:51:04 -07:00

xfrm4_policy.c

ipsec: Fix bogus bundle flowi

2010-03-03 01:04:37 -08:00

xfrm4_state.c

…

xfrm4_tunnel.c

…