Tamir Duberstein f63fa1a0d4 ipv6: raw: check passed optlen before reading ... [ Upstream commit fb7bc92040 ] Add a check that the user-provided option is at least as long as the number of bytes we intend to read. Before this patch we would blindly read sizeof(int) bytes even in cases where the user passed optlen<sizeof(int), which would potentially read garbage or fault. Discovered by new tests in https://github.com/google/gvisor/pull/6957 . The original get_user call predates history in the git repo. Signed-off-by: Tamir Duberstein <tamird@gmail.com> Signed-off-by: Willem de Bruijn <willemb@google.com> Link: https://lore.kernel.org/r/20211229200947.2862255-1-willemdebruijn.kernel@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-01-11 15:25:02 +01:00
..
ila
netfilter	netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6	2021-10-27 09:56:47 +02:00
addrconf_core.c	ipv6: add ipv6_fragment hook in ipv6_stub	2020-08-31 12:26:39 -07:00
addrconf.c	gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE	2021-11-18 14:03:59 +01:00
addrlabel.c	ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init	2020-11-25 11:20:16 -08:00
af_inet6.c	net: ipv6: add fib6_nh_release_dsts stub	2021-12-01 09:19:05 +01:00
ah6.c	xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume	2021-04-14 08:42:05 +02:00
anycast.c	ipv6: fix memory leaks on IPV6_ADDRFORM path	2020-07-30 16:30:55 -07:00
calipso.c	cipso,calipso: resolve a number of problems with the DOI refcounts	2021-03-17 17:06:15 +01:00
datagram.c	icmp6: support rfc 4884	2020-07-24 17:12:41 -07:00
esp6_offload.c	xfrm: Provide private skb extensions for segmented and hw offloaded ESP packets	2021-04-14 08:42:07 +02:00
esp6.c	ipv6: check return value of ipv6_skip_exthdr	2021-12-08 09:03:19 +01:00
exthdrs_core.c
exthdrs_offload.c
exthdrs.c	ipv6: fix out-of-bound access in ip6_parse_tlv()	2021-07-14 16:56:28 +02:00
fib6_notifier.c
fib6_rules.c	ipv6: fix memory leak in fib6_rule_suppress	2021-12-08 09:03:21 +01:00
fou6.c
icmp.c	net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending	2021-03-04 11:38:46 +01:00
inet6_connection_sock.c
inet6_hashtables.c	net: prefer socket bound to interface when not in VRF	2021-10-13 10:04:29 +02:00
ip6_checksum.c
ip6_fib.c	ipv6: delay fib6_sernum increase in fib6_add	2021-09-30 10:11:06 +02:00
ip6_flowlabel.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next	2020-08-05 20:13:21 -07:00
ip6_gre.c	ipv6: remove extra dev_hold() for fallback tunnels	2021-05-22 11:40:55 +02:00
ip6_icmp.c	net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending	2021-03-04 11:38:46 +01:00
ip6_input.c	ipv6: weaken the v4mapped source check	2021-03-30 14:32:01 +02:00
ip6_offload.c	udp: move gro declarations to net/udp.h	2020-06-23 20:10:15 -07:00
ip6_offload.h
ip6_output.c	ipv6: fix typos in __ip6_finish_output()	2021-12-01 09:19:04 +01:00
ip6_tunnel.c	ip6_tunnel: fix GRE6 segmentation	2021-07-14 16:56:25 +02:00
ip6_udp_tunnel.c
ip6_vti.c	ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate	2022-01-11 15:25:02 +01:00
ip6mr.c	net/ipv6: switch ip6_mroute_setsockopt to sockptr_t	2020-07-24 15:41:54 -07:00
ipcomp6.c	ipcomp: assign if_id to child tunnel from parent tunnel	2020-07-09 12:55:37 +02:00
ipv6_sockglue.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-08-02 01:02:12 -07:00
Kconfig	net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC	2020-09-18 17:45:04 -07:00
Makefile
mcast_snoop.c	net: bridge: mcast: fix broken length + header check for MRDv6 Adv.	2021-05-14 09:50:44 +02:00
mcast.c	mld: fix panic in mld_newpack()	2021-06-03 09:00:48 +02:00
mip6.c
ndisc.c	net: Exempt multicast addresses from five-second neighbor lifetime	2020-11-13 14:24:39 -08:00
netfilter.c	netfilter: use actual socket sk rather than skb sk when routing harder	2020-10-30 12:57:39 +01:00
output_core.c	ipv6: use prandom_u32() for ID generation	2021-07-19 09:44:44 +02:00
ping.c	ipv6/ping: set skb->mark on icmpv6 sockets	2020-07-03 14:36:04 -07:00
proc.c
protocol.c
raw.c	ipv6: raw: check passed optlen before reading	2022-01-11 15:25:02 +01:00
reassembly.c	ipv6: record frag_max_size in atomic fragments in input path	2021-06-03 09:00:50 +02:00
route.c	ipv6: Do cleanup if attribute validation fails in multipath route	2022-01-11 15:25:01 +01:00
rpl_iptunnel.c	net: ipv6: Use struct_size() helper and kcalloc()	2020-06-23 20:27:09 -07:00
rpl.c
seg6_hmac.c
seg6_iptunnel.c	seg6: fix the iif in the IPv6 socket control block	2021-12-14 11:32:36 +01:00
seg6_local.c
seg6.c
sit.c	sit: do not call ipip6_dev_free() from sit_init_net()	2021-12-22 09:30:56 +01:00
syncookies.c	net: Update window_clamp if SOCK_RCVBUF is set	2020-11-10 17:42:35 -08:00
sysctl_net_ipv6.c	ipv6: Fix sysctl max for fib_multipath_hash_policy	2020-09-02 15:44:53 -07:00
tcp_ipv6.c	ipv6: tcp: drop silly ICMPv6 packet too big messages	2021-07-25 14:36:21 +02:00
tcpv6_offload.c
tunnel6.c	tunnel6: add tunnel6_input_afinfo for ipip and ipv6 tunnels	2020-07-09 12:52:37 +02:00
udp_impl.h	net: pass a sockptr_t into ->setsockopt	2020-07-24 15:41:54 -07:00
udp_offload.c	udp: ipv4: manipulate network header of NATed UDP GRO fraglist	2021-02-10 09:29:23 +01:00
udp.c	udp: using datalen to cap ipv6 udp max gso segments	2022-01-05 12:40:30 +01:00
udplite.c	net/ipv6: remove compat_ipv6_{get,set}sockopt	2020-07-19 18:16:41 -07:00
xfrm6_input.c
xfrm6_output.c	net: ipv6: fix return value of ip6_skb_dst_mtu	2021-07-25 14:36:18 +02:00
xfrm6_policy.c
xfrm6_protocol.c
xfrm6_state.c
xfrm6_tunnel.c	xfrm: interface: fix the priorities for ipip and ipv6 tunnels	2020-10-09 12:29:48 +02:00