malhuda/msm-4.14
1
0
Fork 0
mirror of https://github.com/rd-stuffs/msm-4.14.git synced 2025-02-20 11:45:48 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity
msm-4.14/net/sched
History
Cong Wang b9b47801ce net_sched: reject TCF_EM_SIMPLE case for complex ematch module 
[ Upstream commit 9cd3fd2054c3b3055163accbf2f31a4426f10317 ]

When TCF_EM_SIMPLE was introduced, it is supposed to be convenient
for ematch implementation:

https://lore.kernel.org/all/20050105110048.GO26856@postel.suug.ch/

"You don't have to, providing a 32bit data chunk without TCF_EM_SIMPLE
set will simply result in allocating & copy. It's an optimization,
nothing more."

So if an ematch module provides ops->datalen that means it wants a
complex data structure (saved in its em->data) instead of a simple u32
value. We should simply reject such a combination, otherwise this u32
could be misinterpreted as a pointer.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Reported-and-tested-by: syzbot+4caeae4c7103813598ae@syzkaller.appspotmail.com
Reported-by: Jun Nie <jun.nie@linaro.org>
Cc: Jamal Hadi Salim <jhs@mojatatu.com>
Cc: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Cong Wang <cong.wang@bytedance.com>
Acked-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-01-18 09:26:29 +01:00
..
act_api.c
net: sched: limit TC_ACT_REPEAT loops
2022-02-23 11:57:35 +01:00
act_bpf.c
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:32:20 +01:00
act_connmark.c
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:32:20 +01:00
act_csum.c
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:32:20 +01:00
act_gact.c
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:32:20 +01:00
act_ife.c
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:32:20 +01:00
act_ipt.c
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:32:20 +01:00
act_meta_mark.c
…
act_meta_skbprio.c
…
act_meta_skbtcindex.c
…
act_mirred.c
act_mirred: Fix mirred_init_module error handling
2020-01-27 14:46:49 +01:00
act_nat.c
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:32:20 +01:00
act_pedit.c
net/sched: act_pedit: fix WARN() in the traffic path
2019-12-01 09:13:11 +01:00
act_police.c
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:32:20 +01:00
act_sample.c
net/sched: act_sample: don't push mac header on ip6gre ingress
2019-10-05 12:47:40 +02:00
act_simple.c
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:32:20 +01:00
act_skbedit.c
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:32:20 +01:00
act_skbmod.c
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:32:20 +01:00
act_tunnel_key.c
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:32:20 +01:00
act_vlan.c
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:32:20 +01:00
cls_api.c
…
cls_basic.c
…
cls_bpf.c
…
cls_cgroup.c
…
cls_flow.c
…
cls_flower.c
net: sched: correct flower port blocking
2020-03-11 18:02:48 +01:00
cls_fw.c
…
cls_matchall.c
net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS
2020-02-28 16:36:09 +01:00
cls_route.c
net_sched: cls_route: disallow handle of 0
2022-08-25 11:11:30 +02:00
cls_rsvp6.c
…
cls_rsvp.c
…
cls_rsvp.h
cls_rsvp: fix rsvp_policy
2020-02-14 16:32:06 -05:00
cls_tcindex.c
net: sched: fix warning in tcindex_alloc_perfect_hash
2021-07-20 16:17:38 +02:00
cls_u32.c
net/sched: cls_u32: fix netns refcount changes in u32_change()
2022-05-12 12:17:04 +02:00
em_canid.c
…
em_cmp.c
…
em_ipset.c
…
em_meta.c
…
em_nbyte.c
…
em_text.c
…
em_u32.c
…
ematch.c
net_sched: reject TCF_EM_SIMPLE case for complex ematch module
2023-01-18 09:26:29 +01:00
Kconfig
…
Makefile
…
sch_api.c
net: sched: avoid duplicates in classes dump
2021-03-17 16:34:29 +01:00
sch_atm.c
net_sched: fix a memory leak in atm_tc_init()
2020-07-22 09:22:20 +02:00
sch_blackhole.c
…
sch_cbq.c
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
2021-09-22 11:45:22 +02:00
sch_choke.c
net: sched: validate stab values
2021-03-30 14:40:12 +02:00
sch_codel.c
…
sch_drr.c
…
sch_dsmark.c
sch_dsmark: fix a NULL deref in qdisc_reset()
2021-06-03 08:36:25 +02:00
sch_fifo.c
net_sched: fix NULL deref in fifo_set_limit()
2021-10-17 10:08:33 +02:00
sch_fq_codel.c
fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks
2020-05-20 08:16:53 +02:00
sch_fq.c
net: fq: add missing attribute validation for orphan mask
2020-03-20 10:54:11 +01:00
sch_generic.c
net: Fix data-races around weight_p and dev_weight_[rt]x_bias.
2022-09-05 10:25:03 +02:00
sch_gred.c
net: sched: validate stab values
2021-03-30 14:40:12 +02:00
sch_hfsc.c
…
sch_hhf.c
net/flow_dissector: switch to siphash
2019-11-10 11:25:37 +01:00
sch_htb.c
…
sch_ingress.c
…
sch_mq.c
net: sched: fix tc -s class show no bstats on class with nolock subqueues
2019-12-05 15:38:19 +01:00
sch_mqprio.c
net: sched: fix tc -s class show no bstats on class with nolock subqueues
2019-12-05 15:38:19 +01:00
sch_multiq.c
net: sched: fix tc -s class show no bstats on class with nolock subqueues
2019-12-05 15:38:19 +01:00
sch_netem.c
net: netem: correct the parent's backlog when corrupted packet was dropped
2020-01-27 14:46:50 +01:00
sch_pie.c
…
sch_plug.c
…
sch_prio.c
net: sch_prio: When ungrafting, replace with FIFO
2020-01-12 12:12:08 +01:00
sch_qfq.c
sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
2022-01-11 13:57:36 +01:00
sch_red.c
net: sched: Fix use after free in red_enqueue()
2022-11-10 15:47:20 +01:00
sch_sfb.c
sch_sfb: Also store skb len before calling child enqueue
2022-09-15 12:23:52 +02:00
sch_sfq.c
net: sched: validate stab values
2021-03-30 14:40:12 +02:00
sch_tbf.c
…
sch_teql.c
net: sched: sch_teql: fix null-pointer dereference
2021-04-16 11:57:48 +02:00