Dan Rosenberg d7a23a52a0 irda: prevent heap corruption on invalid nickname ... commit d50e7e3604 upstream. Invalid nicknames containing only spaces will result in an underflow in a memcpy size calculation, subsequently destroying the heap and panicking. v2 also catches the case where the provided nickname is longer than the buffer size, which can result in controllable heap corruption. Signed-off-by: Dan Rosenberg <drosenberg@vsecurity.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>		2011-04-14 16:53:25 -07:00
..
9p	9p: strlen() doesn't count the terminator	2010-08-10 10:20:39 -07:00
802
8021q	vlan: Fix register_vlan_dev() error path	2009-11-17 06:45:04 -08:00
appletalk	Have atalk_route_packet() return NET_RX_SUCCESS not NET_XMIT_SUCCESS	2009-09-14 17:02:47 -07:00
atm	net: Make setsockopt() optlen be unsigned.	2009-09-30 16:12:20 -07:00
ax25	ax25: netrom: rose: Fix timer oopses	2010-02-09 04:50:56 -08:00
bluetooth	Bluetooth: Fix kernel crash on L2CAP stress tests	2010-04-01 15:58:55 -07:00
bridge	bridge: Clear INET control block of SKBs passed into ip_fragment().	2010-09-26 17:21:19 -07:00
can	can-bcm: fix minor heap overflow	2010-12-09 13:27:10 -08:00
core	net: don't allow CAP_NET_ADMIN to load non-netdev kernel modules	2011-03-14 14:30:00 -07:00
dcb	net: fix double skb free in dcbnl	2009-09-26 20:16:15 -07:00
dccp	dccp: fix oops on Reset after close	2011-03-07 15:17:57 -08:00
decnet	DECnet: don't leak uninitialized stack byte	2010-12-09 13:27:03 -08:00
dsa	netdev: convert pseudo-devices to netdev_tx_t	2009-09-01 01:13:07 -07:00
econet	econet: fix CVE-2010-3850	2010-12-09 13:27:12 -08:00
ethernet
ieee802154	net: Make setsockopt() optlen be unsigned.	2009-09-30 16:12:20 -07:00
ipv4	net: don't allow CAP_NET_ADMIN to load non-netdev kernel modules	2011-03-14 14:30:00 -07:00
ipv6	ip6ip6: autoload ip6 tunnel	2011-03-14 14:30:00 -07:00
ipx	net: Make setsockopt() optlen be unsigned.	2009-09-30 16:12:20 -07:00
irda	irda: prevent heap corruption on invalid nickname	2011-04-14 16:53:25 -07:00
iucv	net: Make setsockopt() optlen be unsigned.	2009-09-30 16:12:20 -07:00
key	net: file_operations should be const	2009-09-02 01:03:53 -07:00
lapb
llc	net/llc: make opt unsigned in llc_ui_setsockopt()	2010-09-26 17:21:24 -07:00
mac80211	mac80211: initialize sta->last_rx in sta_info_alloc	2011-04-14 16:53:19 -07:00
netfilter	netfilter: nf_log: avoid oops in (un)bind with invalid nfproto values	2011-03-14 14:29:58 -07:00
netlabel	Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6	2009-07-30 19:22:43 -07:00
netlink	netlink: fix compat recvmsg	2010-08-26 16:41:55 -07:00
netrom	ax25: netrom: rose: Fix timer oopses	2010-02-09 04:50:56 -08:00
packet	af_packet: Don't use skb after dev_queue_xmit()	2010-02-09 04:50:56 -08:00
phonet	Phonet: disable network namespace support	2010-10-28 21:44:17 -07:00
rds	rds: Integer overflow in RDS cmsg handling	2010-12-09 13:27:12 -08:00
rfkill	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6	2009-11-23 14:01:47 -08:00
rose	rose: Fix signedness issues wrt. digi count.	2010-10-28 21:44:10 -07:00
rxrpc	net: Make setsockopt() optlen be unsigned.	2009-09-30 16:12:20 -07:00
sched	sched: Fix softirq time accounting	2011-02-17 15:37:24 -08:00
sctp	sctp: Fix oops when sending queued ASCONF chunks	2011-03-07 15:17:55 -08:00
sunrpc	SUNRPC: Never reuse the socket port after an xs_close()	2011-03-27 11:30:50 -07:00
tipc	tipc: Fix oops on send prior to entering networked mode (v3)	2010-07-05 11:11:16 -07:00
unix	UNIX: Do not loop forever at unix_autobind().	2010-09-26 17:21:21 -07:00
wanrouter
wimax
wireless	wext: fix potential private ioctl memory content leak	2010-10-28 21:44:02 -07:00
x25	x25: Do not reference freed memory.	2011-03-02 09:47:07 -05:00
xfrm	net: file_operations should be const	2009-09-02 01:03:53 -07:00
compat.c	net: Limit socket I/O iovec total length to INT_MAX.	2010-12-09 13:27:13 -08:00
Kconfig
Makefile
nonet.c
socket.c	net: Truncate recvfrom and sendto length to INT_MAX.	2010-12-09 13:27:12 -08:00
sysctl_net.c
TUNABLE