Piotr Sawicki bff663136d Smack: Fix handling of IPv4 traffic received by PF_INET6 sockets ...

[ Upstream commit 129a99890936766f4b69b9da7ed88366313a9210 ]

A socket which has sk_family set to PF_INET6 is able to receive not
only IPv6 but also IPv4 traffic (IPv4-mapped IPv6 addresses).

Prior to this patch, the smk_skb_to_addr_ipv6() could have been
called for socket buffers containing IPv4 packets, in result such
traffic was allowed.

Signed-off-by: Piotr Sawicki <p.sawicki2@partner.samsung.com>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-09-26 08:38:03 +02:00

..

Kconfig

Smack: Signal delivery as an append operation

2016-09-08 13:22:56 -07:00

Makefile

Smack: Repair netfilter dependency

2015-01-23 10:08:19 -08:00

smack_access.c

Smack: Use cap_capable in privilege check

2017-06-01 09:27:21 -07:00

smack_lsm.c

Smack: Fix handling of IPv4 traffic received by PF_INET6 sockets

2018-09-26 08:38:03 +02:00

smack_netfilter.c

netfilter: nf_hook_ops structs can be const

2017-07-31 19:10:44 +02:00

smack.h

Smack: Use cap_capable in privilege check

2017-06-01 09:27:21 -07:00

smackfs.c

fs: constify tree_descr arrays passed to simple_fill_super()

2017-04-26 23:54:06 -04:00