Ben Hutchings 4ab42d78e3 ppp, slip: Validate VJ compression slot parameters completely ... Currently slhc_init() treats out-of-range values of rslots and tslots as equivalent to 0, except that if tslots is too large it will dereference a null pointer (CVE-2015-7799). Add a range-check at the top of the function and make it return an ERR_PTR() on error instead of NULL. Change the callers accordingly. Compile-tested only. Reported-by: 郭永刚 <guoyonggang@360.cn> References: http://article.gmane.org/gmane.comp.security.oss.general/17908 Signed-off-by: Ben Hutchings <ben@decadent.org.uk> Signed-off-by: David S. Miller <davem@davemloft.net>		2015-11-02 16:25:00 -05:00
..
appletalk	…
arcnet	ARCNET: fix hard_header_len limit	2015-09-17 22:26:55 -07:00
bonding	Changes for 4.3	2015-09-09 08:33:31 -07:00
caif	net: caif: convert to using IFF_NO_QUEUE	2015-08-18 11:55:07 -07:00
can	can: Use correct type in sizeof() in nla_put()	2015-10-30 14:33:26 +01:00
cris	…
dsa	dsa: mv88e6xxx: Enable forwarding for unknown to the CPU port	2015-09-29 21:06:51 -07:00
ethernet	sh_eth: fix WARNING in dma_common_free_remap()	2015-11-02 15:56:11 -05:00
fddi	net/fddi: remove HWM_REVERSE() macro	2015-08-13 21:12:17 -07:00
fjes	fjes: fix off-by-one error at fjes_hw_update_zone_task()	2015-09-17 22:34:09 -07:00
hamradio	Merge branch 'x86/urgent' into x86/asm to fix up conflicts and to pick up fixes	2015-08-18 09:39:47 +02:00
hippi	…
hyperv	flow_dissector: Add flags argument to skb_flow_dissector functions	2015-09-01 15:06:22 -07:00
ieee802154	cc2520: set the default fifo pin value from platform data	2015-08-11 06:13:39 +02:00
ipvlan	net: ipvlan: convert to using IFF_NO_QUEUE	2015-08-18 11:55:06 -07:00
irda	irda: ali-ircc: Fix deadlock in ali_ircc_sir_change_speed()	2015-09-11 16:18:33 -07:00
phy	net: phy: mdio: add missing of_node_put	2015-10-26 22:08:12 -07:00
plip	…
ppp	ppp, slip: Validate VJ compression slot parameters completely	2015-11-02 16:25:00 -05:00
slip	ppp, slip: Validate VJ compression slot parameters completely	2015-11-02 16:25:00 -05:00
team	net: team: convert to using IFF_NO_QUEUE	2015-08-18 11:55:05 -07:00
usb	qmi_wwan: fix entry for HP lt4112 LTE/HSPA+ Gobi 4G Module	2015-11-02 15:59:21 -05:00
vmxnet3	…
wan	net: wan: sbni: fix device usage count	2015-09-05 17:32:53 -07:00
wimax	…
wireless	ath6kl: add missing of_node_put	2015-10-26 22:08:12 -07:00
xen-netback	xen-netback: correctly check failed allocation	2015-10-18 19:37:29 -07:00
Kconfig	geneve: Consolidate Geneve functionality in single module.	2015-08-27 15:42:48 -07:00
LICENSE.SRC	…
Makefile	fjes: Introduce FUJITSU Extended Socket Network Device driver	2015-08-24 14:06:33 -07:00
Space.c	…
dummy.c	net: dummy: convert to using IFF_NO_QUEUE	2015-08-18 11:55:05 -07:00
eql.c	…
geneve.c	openvswitch: Fix egress tunnel info.	2015-10-22 19:39:25 -07:00
ifb.c	…
loopback.c	net: loopback: convert to using IFF_NO_QUEUE	2015-08-18 11:55:05 -07:00
macvlan.c	macvlan: Don't segment multiple tagged packets on macvlan device	2015-08-03 14:24:49 -07:00
macvtap.c	macvtap: unbreak receiving of gro skb with frag list	2015-10-23 02:34:39 -07:00
mdio.c	…
mii.c	…
netconsole.c	…
nlmon.c	net: nlmon: convert to using IFF_NO_QUEUE	2015-08-18 11:55:05 -07:00
ntb_netdev.c	NTB: Add flow control to the ntb_netdev	2015-09-07 15:17:08 -04:00
rionet.c	bus: subsys: update return type of ->remove_dev() to void	2015-08-05 17:08:14 -07:00
sb1000.c	…
sungem_phy.c	…
tun.c	tuntap: Don't segment multiple tagged packets on tap device	2015-08-03 14:24:50 -07:00
veth.c	net: veth: enable noqueue operation by default	2015-08-18 11:55:04 -07:00
virtio_net.c	virtio-net: avoid unnecessary sg initialzation	2015-08-27 15:51:45 -07:00
vrf.c	net: Fix vti use case with oif in dst lookups	2015-09-17 16:36:34 -07:00
vxlan.c	openvswitch: Fix egress tunnel info.	2015-10-22 19:39:25 -07:00
xen-netfront.c	xen-netfront: update num_queues to real created	2015-10-21 07:45:39 -07:00