Jason Wang 6f09234385 net: flow_dissector: fail on evil iph->ihl ... We don't validate iph->ihl which may lead a dead loop if we meet a IPIP skb whose iph->ihl is zero. Fix this by failing immediately when iph->ihl is evil (less than 5). This issue were introduced by commit ec5efe7946 (rps: support IPIP encapsulation). Cc: Eric Dumazet <edumazet@google.com> Cc: Petr Matousek <pmatouse@redhat.com> Cc: Michael S. Tsirkin <mst@redhat.com> Cc: Daniel Borkmann <dborkman@redhat.com> Signed-off-by: Jason Wang <jasowang@redhat.com> Acked-by: Eric Dumazet <edumazet@google.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2013-11-02 02:16:07 -04:00
..
9p	…
802	mrp: add periodictimer to allow retries when packets get lost	2013-09-23 16:53:52 -04:00
8021q	net: vlan: fix nlmsg size calculation in vlan_get_size()	2013-10-08 16:32:41 -04:00
appletalk	…
atm	…
ax25	…
batman-adv	batman-adv: set up network coding packet handlers during module init	2013-10-02 13:46:19 +02:00
bluetooth	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless into for-davem	2013-09-27 13:11:17 -04:00
bridge	bridge: pass correct vlan id to multicast code	2013-10-29 17:40:08 -04:00
caif	…
can	…
ceph	…
core	net: flow_dissector: fail on evil iph->ihl	2013-11-02 02:16:07 -04:00
dcb	…
dccp	…
decnet	…
dns_resolver	…
dsa	…
ethernet	…
ieee802154	6lowpan: Sync default hardware address of lowpan links to their wpan	2013-10-08 15:28:37 -04:00
ipv4	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec	2013-11-02 01:22:39 -04:00
ipv6	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec	2013-11-02 01:22:39 -04:00
ipx	…
irda	…
iucv	…
key	…
l2tp	l2tp: must disable bh before calling l2tp_xmit_skb()	2013-10-11 16:51:37 -04:00
lapb	net/lapb: re-send packets on timeout	2013-09-23 16:52:45 -04:00
llc	…
mac80211	mac80211: fix crash if bitrate calculation goes wrong	2013-10-14 09:47:08 +02:00
mac802154	…
mpls	…
netfilter	netfilter: xt_NFQUEUE: fix --queue-bypass regression	2013-10-29 13:05:54 +01:00
netlabel	…
netlink	…
netrom	…
nfc	…
openvswitch	openvswitch: fix vport-netdev unregister	2013-10-16 14:50:22 -07:00
packet	…
phonet	…
rds	…
rfkill	…
rose	…
rxrpc	…
sched	pkt_sched: fq: clear time_next_packet for reused flows	2013-10-28 00:18:31 -04:00
sctp	net: sctp: fix ASCONF to allow non SCTP_ADDR_SRC addresses in ipv6	2013-10-23 16:57:14 -04:00
sunrpc	…
tipc	…
unix	net: unix: inherit SOCK_PASS{CRED, SEC} flags from socket to fix race	2013-10-19 18:50:15 -04:00
vmw_vsock	…
wimax	…
wireless	wireless: radiotap: fix parsing buffer overrun	2013-10-14 09:47:00 +02:00
x25	net: x25: Fix dead URLs in Kconfig	2013-10-29 17:35:17 -04:00
xfrm	xfrm: prevent ipcomp scratch buffer race condition	2013-10-18 10:00:00 +02:00
Kconfig	…
Makefile	…
compat.c	net: heap overflow in __audit_sockaddr()	2013-10-03 16:05:14 -04:00
nonet.c	…
socket.c	net: heap overflow in __audit_sockaddr()	2013-10-03 16:05:14 -04:00
sysctl_net.c	net: Update the sysctl permissions handler to test effective uid/gid	2013-10-07 15:57:56 -04:00