kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-16 22:39:48 +00:00
Code Issues Releases Packages Activity
linux/net/rose
History
Willem de Bruijn d0fb92f2ca rose: limit sk_filter trim to payload 
commit f4979fcea7 upstream.

Sockets can have a filter program attached that drops or trims
incoming packets based on the filter program return value.

Rose requires data packets to have at least ROSE_MIN_LEN bytes. It
verifies this on arrival in rose_route_frame and unconditionally pulls
the bytes in rose_recvmsg. The filter can trim packets to below this
value in-between, causing pull to fail, leaving the partial header at
the time of skb_copy_datagram_msg.

Place a lower bound on the size to which sk_filter may trim packets
by introducing sk_filter_trim_cap and call this for rose packets.

Signed-off-by: Willem de Bruijn <willemb@google.com>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
[bwh: Backported to 3.16: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
History 2017-02-23 03:54:46 +00:00
..
af_rose.c NET: ROSE: Don't dereference NULL neighbour pointer. 2015-07-15 10:00:49 +01:00
Makefile Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
rose_dev.c rose: cleanup checkpatch errors,spaces required 2013-12-22 18:57:58 -05:00
rose_in.c rose: limit sk_filter trim to payload 2017-02-23 03:54:46 +00:00
rose_link.c Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
rose_loopback.c rose: Add length checks to CALL_REQUEST parsing 2011-03-27 17:59:04 -07:00
rose_out.c Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
rose_route.c Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
rose_subr.c net: cleanup unsigned to unsigned int 2012-04-15 12:44:40 -04:00
rose_timer.c Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
sysctl_net_rose.c net: Convert uses of typedef ctl_table to struct ctl_table 2013-06-13 02:36:09 -07:00