Eric Dumazet d71b789688 netlabel: out of bound access in cipso_v4_validate() ... syzkaller found another out of bound access in ip_options_compile(), or more exactly in cipso_v4_validate() Fixes: 20e2a86485 ("cipso: handle CIPSO options correctly when NetLabel is disabled") Fixes: 446fda4f26 ("[NetLabel]: CIPSOv4 engine") Signed-off-by: Eric Dumazet <edumazet@google.com> Reported-by: Dmitry Vyukov <dvyukov@google.com> Cc: Paul Moore <paul@paul-moore.com> Acked-by: Paul Moore <paul@paul-moore.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2017-02-04 19:44:22 -05:00
..
9p
bluetooth	Bluetooth: __ variants of u8 and friends are not neccessary inside kernel	2016-11-27 07:41:05 +01:00
caif
irda
iucv
netfilter	netfilter: nf_tables: deconstify walk callback function	2017-01-24 21:46:58 +01:00
netns	ipv4: Namespaceify tcp_tw_reuse knob	2016-12-27 12:28:07 -05:00
nfc
phonet
sctp	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
tc_act	net/sched: act_tunnel_key: add helper inlines to access tcf_tunnel_key	2016-11-09 13:41:53 -05:00
6lowpan.h
act_api.h	net_sched: gen_estimator: complete rewrite of rate estimators	2016-12-05 15:21:59 -05:00
addrconf.h	ipv6: fix a potential deadlock in do_ipv6_setsockopt()	2016-10-21 11:29:02 -04:00
af_ieee802154.h
af_rxrpc.h
af_unix.h
af_vsock.h
ah.h
arp.h
atmclip.h
ax25.h
ax88796.h
bond_3ad.h
bond_alb.h
bond_options.h
bonding.h	netns: make struct pernet_operations::id unsigned int	2016-11-18 10:59:15 -05:00
busy_poll.h	udp: enable busy polling for all sockets	2016-11-18 10:44:31 -05:00
calipso.h
cfg80211-wext.h
cfg80211.h	cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts	2016-12-09 12:57:49 +01:00
cfg802154.h
checksum.h	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
cipso_ipv4.h	netlabel: out of bound access in cipso_v4_validate()	2017-02-04 19:44:22 -05:00
cls_cgroup.h
codel.h
codel_impl.h
codel_qdisc.h
compat.h
datalink.h
dcbevent.h
dcbnl.h
devlink.h	devlink: Add E-Switch inline mode control	2016-11-24 16:01:14 -05:00
dn.h
dn_dev.h
dn_fib.h
dn_neigh.h
dn_nsp.h
dn_route.h
dsa.h
dsfield.h
dst.h
dst_cache.h
dst_metadata.h	net/dst: Add dst port to dst_metadata utility functions	2016-11-09 13:41:54 -05:00
dst_ops.h
esp.h
ethoc.h
fib_rules.h	net: core: add UID to flows, rules, and routes	2016-11-04 14:45:23 -04:00
firewire.h
flow.h	Merge branch 'smp-hotplug-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2016-12-12 19:25:04 -08:00
flow_dissector.h	flow dissector: ICMP support	2016-12-08 11:45:21 -05:00
flowcache.h	net/flowcache: Convert to hotplug state machine	2016-11-09 23:45:28 +01:00
fou.h
fq.h	fq.h: Port memory limit mechanism from fq_codel	2016-09-30 13:29:21 +02:00
fq_impl.h	fq.h: Port memory limit mechanism from fq_codel	2016-09-30 13:29:21 +02:00
garp.h
gen_stats.h	net_sched: gen_estimator: complete rewrite of rate estimators	2016-12-05 15:21:59 -05:00
genetlink.h	genetlink: Make family a signed integer.	2016-11-13 12:14:59 -05:00
geneve.h
gre.h
gro_cells.h	gro_cells: mark napi struct as not busy poll candidates	2016-11-15 22:27:27 -05:00
gtp.h
gue.h
hwbm.h
icmp.h
ieee80211_radiotap.h	wireless: radiotap: fix timestamp sampling position values	2016-10-19 12:11:36 +02:00
ieee802154_netdev.h
if_inet6.h	ipv6 addrconf: Implemented enhanced DAD (RFC7527)	2016-12-03 23:21:37 -05:00
ila.h
inet6_connection_sock.h	inet: Fix get port to handle zero port number with soreuseport set	2016-12-17 11:13:19 -05:00
inet6_hashtables.h
inet_common.h
inet_connection_sock.h	inet: Fix get port to handle zero port number with soreuseport set	2016-12-17 11:13:19 -05:00
inet_ecn.h
inet_frag.h
inet_hashtables.h
inet_sock.h	ipv4: add IP_RECVFRAGSIZE cmsg	2016-11-03 15:41:11 -04:00
inet_timewait_sock.h
inetpeer.h
ip.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-11-15 10:54:36 -05:00
ip6_checksum.h
ip6_fib.h	net: ipv6: Fix processing of RAs in presence of VRF	2016-10-27 16:30:52 -04:00
ip6_route.h	net: inet: Support UID-based routing in IP protocols.	2016-11-04 14:45:23 -04:00
ip6_tunnel.h	ip6_tunnel: Clear IP6CB in ip6tunnel_xmit()	2016-11-02 15:18:36 -04:00
ip_fib.h	ipv4: fib: Replay events when registering FIB notifier	2016-12-03 19:29:35 -05:00
ip_tunnels.h	netns: make struct pernet_operations::id unsigned int	2016-11-18 10:59:15 -05:00
ip_vs.h
ipcomp.h
ipconfig.h
ipv6.h	ipv6: fix flow labels when the traffic class is non-0	2017-01-31 13:16:59 -05:00
ipx.h
iw_handler.h
kcm.h
l3mdev.h	net: ipv4: Do not drop to make_route if oif is l3mdev	2016-10-13 12:05:26 -04:00
lapb.h
lib80211.h
llc.h
llc_c_ac.h
llc_c_ev.h
llc_c_st.h
llc_conn.h
llc_if.h
llc_pdu.h
llc_s_ac.h
llc_s_ev.h
llc_s_st.h
llc_sap.h
lwtunnel.h	net: Specify the owning module for lwtunnel ops	2017-01-24 16:21:36 -05:00
mac80211.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-10-30 12:42:58 -04:00
mac802154.h
mip6.h
mld.h
mpls.h	openvswitch: use mpls_hdr	2016-10-03 02:00:22 -04:00
mpls_iptunnel.h
mrp.h
ncsi.h	net/ncsi: Introduce ncsi_stop_dev()	2016-10-04 02:11:51 -04:00
ndisc.h	ipv6 addrconf: Implemented enhanced DAD (RFC7527)	2016-12-03 23:21:37 -05:00
neighbour.h
net_namespace.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-11-22 13:27:16 -05:00
net_ratelimit.h
netevent.h
netlabel.h
netlink.h	netlink: revert broken, broken "2-clause nla_ok()"	2016-12-13 14:54:44 -05:00
netprio_cgroup.h
netrom.h
nexthop.h
nl802154.h
p8022.h
ping.h
pkt_cls.h	net/sched: cls_flower: Add offload support using egress Hardware device	2016-12-02 13:28:37 -05:00
pkt_sched.h	net: make default TX queue length a defined constant	2016-11-07 20:15:55 -05:00
pptp.h
protocol.h
psnap.h
raw.h	net: ip, diag -- Add diag interface for raw sockets	2016-10-23 19:35:24 -04:00
rawv6.h	net: ip, diag -- Add diag interface for raw sockets	2016-10-23 19:35:24 -04:00
red.h	ktime: Get rid of the union	2016-12-25 17:21:22 +01:00
regulatory.h
request_sock.h
rose.h
route.h	net: inet: Support UID-based routing in IP protocols.	2016-11-04 14:45:23 -04:00
rtnetlink.h
sch_generic.h	net_sched: gen_estimator: complete rewrite of rate estimators	2016-12-05 15:21:59 -05:00
scm.h
secure_seq.h	tcp: randomize tcp timestamp offsets for each connection	2016-12-02 12:49:59 -05:00
seg6.h	ipv6: sr: add core files for SR HMAC support	2016-11-09 20:40:06 -05:00
seg6_hmac.h	ipv6: sr: add core files for SR HMAC support	2016-11-09 20:40:06 -05:00
slhc_vj.h
snmp.h
sock.h	ktime: Get rid of the union	2016-12-25 17:21:22 +01:00
sock_reuseport.h
Space.h
stp.h
strparser.h
switchdev.h	switchdev: remove FIB offload infrastructure	2016-09-28 04:48:00 -04:00
tcp.h	ipv4: Namespaceify tcp_tw_reuse knob	2016-12-27 12:28:07 -05:00
tcp_states.h
timewait_sock.h
transp_v6.h
tso.h
udp.h	udplite: fix NULL pointer dereference	2016-11-15 11:59:38 -05:00
udp_tunnel.h
udplite.h	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-12-16 10:24:44 -08:00
vsock_addr.h
vxlan.h	vxlan: remove unsed vxlan_dev_dst_port()	2016-11-15 12:16:13 -05:00
wext.h
wimax.h
x25.h
x25device.h
xfrm.h