Mathias Krause 04a6b8bfee xfrm6: Fix ICMPv6 and MH header checks in _decode_session6 ... Ensure there's enough data left prior calling pskb_may_pull(). If skb->data was already advanced, we'll call pskb_may_pull() with a negative value converted to unsigned int -- leading to a huge positive value. That won't matter in practice as pskb_may_pull() will likely fail in this case, but it leads to underflow reports on kernels handling such kind of over-/underflows, e.g. a PaX enabled kernel instrumented with the size_overflow plugin. Reported-by: satmd <satmd@lain.at> Reported-and-tested-by: Marcin Jurkowski <marcin1j@gmail.com> Signed-off-by: Mathias Krause <mathias.krause@secunet.com> Cc: PaX Team <pageexec@freemail.hu> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>		2015-09-14 10:53:05 +02:00
..
6lowpan	6lowpan: move module_init into core functionality	2015-08-11 22:05:36 +02:00
9p	9p: ensure err is initialized to 0 in p9_client_read/write	2015-08-22 21:35:02 -04:00
802
8021q	net: 8021q: convert to using IFF_NO_QUEUE	2015-08-18 11:55:06 -07:00
appletalk
atm	br2684: Remove unnecessary formatting macros b1 and bs	2015-07-31 15:25:52 -07:00
ax25	NET: AX.25: Stop heartbeat timer on disconnect.	2015-07-15 15:59:58 -07:00
batman-adv	batman-adv: turn batadv_neigh_node_get() into local function	2015-08-27 20:15:34 +02:00
bluetooth	Bluetooth: Fix SCO link type handling on connection complete	2015-08-28 21:03:00 +02:00
bridge	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	2015-08-28 16:29:59 -07:00
caif	net: caif: convert to using IFF_NO_QUEUE	2015-08-18 11:55:07 -07:00
can
ceph
core	sock, diag: fix panic in sock_diag_put_filterinfo	2015-09-02 11:29:29 -07:00
dcb
dccp	tcp: fix recv with flags MSG_WAITALL | MSG_PEEK	2015-07-27 01:06:53 -07:00
decnet
dns_resolver
dsa	net: dsa: Allow DSA and CPU ports to have a phy-mode property	2015-08-31 14:48:02 -07:00
ethernet	flow_dissector: Add flags argument to skb_flow_dissector functions	2015-09-01 15:06:22 -07:00
hsr	net: hsr: convert to using IFF_NO_QUEUE	2015-08-18 11:55:07 -07:00
ieee802154	Merge branch 'for-upstream' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next	2015-08-29 13:15:03 -07:00
ipv4	netfilter: nf_dup{4, 6}: fix build error when nf_conntrack disabled	2015-09-02 16:28:06 -07:00
ipv6	xfrm6: Fix ICMPv6 and MH header checks in _decode_session6	2015-09-14 10:53:05 +02:00
ipx
irda
iucv
key	net: Fix RCU splat in af_key	2015-08-24 14:48:10 -07:00
l2tp
lapb
llc	tcp: fix recv with flags MSG_WAITALL | MSG_PEEK	2015-07-27 01:06:53 -07:00
mac80211	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-08-21 11:44:04 -07:00
mac802154	ieee802154: add ack request default handling	2015-08-10 20:43:06 +02:00
mpls	mpls: fix mpls_net_init memory leak	2015-08-31 12:45:09 -07:00
netfilter	netfilter: nf_conntrack: make nf_ct_zone_dflt built-in	2015-09-02 16:32:56 -07:00
netlabel
netlink	netlink: rx mmap: fix POLLIN condition	2015-08-30 21:55:51 -07:00
netrom
nfc	nfc: netlink: Add capability to reply to vendor_cmd with data	2015-08-20 22:00:11 +02:00
openvswitch	ip-tunnel: Use API to access tunnel metadata options.	2015-08-31 12:28:56 -07:00
packet	packet: add extended BPF fanout mode	2015-08-17 14:22:48 -07:00
phonet
rds	RDS: remove superfluous from rds_ib_alloc_fmr()	2015-08-25 16:28:11 -07:00
rfkill	Merge branch 'for-upstream' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next	2015-08-17 15:41:21 -07:00
rose
rxrpc
sched	flow_dissector: Add flags argument to skb_flow_dissector functions	2015-09-01 15:06:22 -07:00
sctp	sctp: add routing output fallback	2015-09-03 15:43:05 -07:00
sunrpc	NFS client bugfixes for Linux 4.2	2015-07-28 09:37:44 -07:00
switchdev	net: switchdev: support static FDB addresses	2015-08-11 12:03:19 -07:00
tipc	tipc: fix stale link problem during synchronization	2015-08-23 16:14:45 -07:00
unix
vmw_vsock
wimax	net:wimax: Fix doucble word "the the" in networking.xml	2015-08-09 22:43:52 -07:00
wireless	nl80211: Allow setting multicast rate on OCB interfaces	2015-08-14 17:49:48 +02:00
x25
xfrm	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2015-09-03 08:08:17 -07:00
compat.c
Kconfig	lwtunnel: infrastructure for handling light weight tunnels like mpls	2015-07-21 10:39:03 -07:00
Makefile
socket.c
sysctl_net.c