linux-stable/net/ipv4/netfilter
Patrick McHardy e17df688f7 [NETFILTER] SCTP conntrack: fix infinite loop
fix infinite loop in the SCTP-netfilter code: check SCTP chunk size to
guarantee progress of for_each_sctp_chunk(). (all other uses of
for_each_sctp_chunk() are preceded by do_basic_checks(), so this fix
should be complete.)

Based on patch from Ingo Molnar <mingo@elte.hu>

CVE-2006-1527

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2006-05-02 17:26:39 -07:00
..
arp_tables.c [PATCH] for_each_possible_cpu: network codes 2006-04-11 06:18:31 -07:00
arpt_mangle.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
arptable_filter.c [NETFILTER]: Clean up hook registration 2006-04-09 22:25:33 -07:00
ip_conntrack_amanda.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_conntrack_core.c [PATCH] for_each_possible_cpu: network codes 2006-04-11 06:18:31 -07:00
ip_conntrack_ftp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_conntrack_helper_h323.c [NETFILTER]: H.323 helper: remove changelog 2006-04-09 22:25:43 -07:00
ip_conntrack_helper_h323_asn1.c [NETFILTER]: H.323 helper: move some function prototypes to ip_conntrack_h323.h 2006-04-09 22:25:35 -07:00
ip_conntrack_helper_h323_types.c [NETFILTER]: Add H.323 conntrack/NAT helper 2006-03-20 23:41:17 -08:00
ip_conntrack_helper_pptp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_conntrack_irc.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_conntrack_netbios_ns.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_conntrack_netlink.c [NETFILTER]: {ip,nf}_conntrack_netlink: fix expectation notifier unregistration 2006-04-01 02:24:48 -08:00
ip_conntrack_proto_generic.c [NETFILTER]: Fix timeout sysctls on big-endian 64bit architectures 2006-01-10 12:54:35 -08:00
ip_conntrack_proto_gre.c [NETFILTER]: ip_conntrack_proto_gre.c needs linux/interrupt.h 2006-01-17 02:42:02 -08:00
ip_conntrack_proto_icmp.c [NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functions 2006-04-09 22:25:42 -07:00
ip_conntrack_proto_sctp.c [NETFILTER] SCTP conntrack: fix infinite loop 2006-05-02 17:26:39 -07:00
ip_conntrack_proto_tcp.c [NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functions 2006-04-09 22:25:42 -07:00
ip_conntrack_proto_udp.c [NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functions 2006-04-09 22:25:42 -07:00
ip_conntrack_standalone.c [NETFILTER]: Fix section mismatch warnings 2006-04-09 22:25:34 -07:00
ip_conntrack_tftp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_nat_amanda.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_nat_core.c [NETFILTER]: Fix NAT PMTUD problems 2006-02-19 22:26:40 -08:00
ip_nat_ftp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_nat_helper.c [NETFILTER]: Fix invalid module autoloading by splitting iptable_nat 2005-09-26 15:25:11 -07:00
ip_nat_helper_h323.c [NETFILTER]: H.323 helper: remove changelog 2006-04-09 22:25:43 -07:00
ip_nat_helper_pptp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_nat_irc.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_nat_proto_gre.c [NETFILTER]: Remove unused function from NAT protocol helpers 2006-01-10 12:54:34 -08:00
ip_nat_proto_icmp.c [NETFILTER]: Remove unused function from NAT protocol helpers 2006-01-10 12:54:34 -08:00
ip_nat_proto_tcp.c [NETFILTER]: Remove unused function from NAT protocol helpers 2006-01-10 12:54:34 -08:00
ip_nat_proto_udp.c [NETFILTER]: Remove unused function from NAT protocol helpers 2006-01-10 12:54:34 -08:00
ip_nat_proto_unknown.c [NETFILTER]: Remove unused function from NAT protocol helpers 2006-01-10 12:54:34 -08:00
ip_nat_rule.c [NETFILTER]: Fix DNAT in LOCAL_OUT 2006-04-09 22:38:29 -07:00
ip_nat_snmp_basic.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_nat_standalone.c [NETFILTER]: Fix section mismatch warnings 2006-04-09 22:25:34 -07:00
ip_nat_tftp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_queue.c [NETFILTER]: Fix section mismatch warnings 2006-04-09 22:25:34 -07:00
ip_tables.c [NETFILTER] x_tables: fix compat related crash on non-x86 2006-05-01 20:48:32 -07:00
ipt_addrtype.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_ah.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_CLUSTERIP.c [NETFILTER]: Fix section mismatch warnings 2006-04-09 22:25:34 -07:00
ipt_DSCP.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_dscp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_ECN.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_ecn.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_hashlimit.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_iprange.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_LOG.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_MASQUERADE.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_NETMAP.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_owner.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_recent.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_REDIRECT.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_REJECT.c [NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functions 2006-04-09 22:25:42 -07:00
ipt_SAME.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_TCPMSS.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_TOS.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_tos.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_TTL.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_ttl.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_ULOG.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
iptable_filter.c [NETFILTER]: Clean up hook registration 2006-04-09 22:25:33 -07:00
iptable_mangle.c [NETFILTER]: Clean up hook registration 2006-04-09 22:25:33 -07:00
iptable_raw.c [NETFILTER]: Clean up hook registration 2006-04-09 22:25:33 -07:00
Kconfig [NETFILTER]: ULOG target is not obsolete 2006-04-24 17:27:29 -07:00
Makefile [NETFILTER]: x_tables: unify IPv4/IPv6 multiport match 2006-04-01 02:22:54 -08:00
nf_conntrack_l3proto_ipv4.c [NETFILTER]: Fix section mismatch warnings 2006-04-09 22:25:34 -07:00
nf_conntrack_proto_icmp.c [NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functions 2006-04-09 22:25:42 -07:00