linux-stable/net/x25
Dan Carpenter 80aa4e1096 x25: add a sanity check parsing X.25 facilities
This was found with a manual audit and I don't have a reproducer.  We
limit ->calling_len and ->called_len when we get them from
copy_from_user() in x25_ioctl() so when they come from skb->data then
we should cap them there as well.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2013-09-04 00:27:27 -04:00
..
af_x25.c x25: Fix broken locking in ioctl error paths. 2013-07-01 18:15:25 -07:00
Kconfig
Makefile
sysctl_net_x25.c
x25_dev.c
x25_facilities.c x25: add a sanity check parsing X.25 facilities 2013-09-04 00:27:27 -04:00
x25_forward.c
x25_in.c
x25_link.c
x25_out.c
x25_proc.c x25: use proc_remove_subtree() 2013-04-09 14:13:35 -04:00
x25_route.c
x25_subr.c
x25_timer.c