Eric Dumazet b9dee56027 l2tp: do not use udp_ioctl() ... [ Upstream commit 72fb96e7bd ] udp_ioctl(), as its name suggests, is used by UDP protocols, but is also used by L2TP :( L2TP should use its own handler, because it really does not look the same. SIOCINQ for instance should not assume UDP checksum or headers. Thanks to Andrey and syzkaller team for providing the report and a nice reproducer. While crashes only happen on recent kernels (after commit 7c13f97ffd ("udp: do fwd memory scheduling on dequeue")), this probably needs to be backported to older kernels. Fixes: 7c13f97ffd ("udp: do fwd memory scheduling on dequeue") Fixes: 8558467201 ("udp: Fix udp_poll() and ioctl()") Signed-off-by: Eric Dumazet <edumazet@google.com> Reported-by: Andrey Konovalov <andreyknvl@google.com> Acked-by: Paolo Abeni <pabeni@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2017-02-18 16:39:28 +01:00
..
6lowpan	6lowpan: put mcast compression in an own function	2015-10-21 00:49:25 +02:00
9p	IB/cma: Add support for network namespaces	2015-10-28 12:32:48 -04:00
802
8021q	net: add recursion limit to GRO	2016-11-15 07:46:38 +01:00
appletalk
atm	atm: deal with setting entry before mkip was called	2015-09-17 22:13:32 -07:00
ax25	ax25: Fix segfault after sock connection timeout	2017-02-04 09:45:09 +01:00
batman-adv	batman-adv: Check for alloc errors when preparing TT local data	2016-12-15 08:49:23 -08:00
bluetooth	Bluetooth: Fix l2cap_sock_setsockopt() with optname BT_RCVMTU	2016-08-20 18:09:19 +02:00
bridge	bridge: netlink: call br_changelink() during br_dev_newlink()	2017-02-04 09:45:09 +01:00
caif	net: caif: fix misleading indentation	2016-09-30 10:18:35 +02:00
can	can: Fix kernel panic at security_sock_rcv_skb	2017-02-18 16:39:26 +01:00
ceph	libceph: verify authorize reply on connect	2017-01-09 08:07:52 +01:00
core	net: use a work queue to defer net_disable_timestamp() work	2017-02-18 16:39:26 +01:00
dcb	net/dcb: make dcbnl.c explicitly non-modular	2015-10-09 07:52:27 -07:00
dccp	net/dccp: fix use-after-free in dccp_invalid_packet	2016-12-10 19:07:24 +01:00
decnet	decnet: Do not build routes to devices without decnet private data.	2016-05-18 17:06:35 -07:00
dns_resolver	net: dns_resolver: convert time_t to time64_t	2015-11-18 16:27:46 -05:00
dsa	net: dsa: Bring back device detaching in dsa_slave_suspend()	2017-02-04 09:45:10 +01:00
ethernet	net: introduce device min_header_len	2017-02-18 16:39:27 +01:00
hsr	net/hsr: fix a warning message	2015-11-23 14:56:15 -05:00
ieee802154	net: fix percpu memory leaks	2015-11-02 22:47:14 -05:00
ipv4	ping: fix a null pointer dereference	2017-02-18 16:39:27 +01:00
ipv6	sit: fix a double free on error path	2017-02-18 16:39:27 +01:00
ipx
irda	net/irda: handle iriap_register_lsap() allocation failure	2016-09-30 10:18:36 +02:00
iucv	af_iucv: Validate socket address length in iucv_sock_bind()	2016-03-03 15:07:03 -08:00
key	af_key: fix two typos	2015-10-23 03:05:19 -07:00
l2tp	l2tp: do not use udp_ioctl()	2017-02-18 16:39:28 +01:00
l3mdev	net: Add netif_is_l3_slave	2015-10-07 04:27:43 -07:00
lapb
llc	net: fix infoleak in llc	2016-05-18 17:06:40 -07:00
mac80211	mac80211: Fix adding of mesh vendor IEs	2017-02-14 15:22:51 -08:00
mac802154	mac802154: llsec: use kzfree	2015-10-21 00:49:24 +02:00
mpls	mpls: find_outdev: check for err ptr in addition to NULL check	2016-04-20 15:42:07 +09:00
netfilter	netfilter: nft_dynset: fix element timeout for HZ != 1000	2016-11-26 09:54:54 +01:00
netlabel	netlabel: add address family checks to netlbl_{sock,req}_delattr()	2016-08-20 18:09:22 +02:00
netlink	netlink: Do not schedule work from sk_destruct	2016-12-10 19:07:23 +01:00
netrom
nfc	net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA	2015-12-01 15:45:05 -05:00
openvswitch	openvswitch: maintain correct checksum state in conntrack actions	2017-02-04 09:45:09 +01:00
packet	packet: round up linear to header len	2017-02-18 16:39:27 +01:00
phonet	phonet: properly unshare skbs in phonet_rcv()	2016-01-31 11:29:00 -08:00
rds	rds: fix an infoleak in rds_inc_info_copy	2016-09-15 08:27:51 +02:00
rfkill	rfkill: fix rfkill_fop_read wait_event usage	2016-03-03 15:07:26 -08:00
rose
rxrpc	net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA	2015-12-01 15:45:05 -05:00
sched	net, sched: fix soft lockup in tc_classify	2017-01-15 13:41:34 +01:00
sctp	sctp: avoid BUG_ON on sctp_wait_for_sndbuf	2017-02-18 16:39:27 +01:00
sunrpc	svcrpc: fix oops in absence of krb5 module	2017-02-09 08:02:45 +01:00
switchdev	switchdev: pass pointer to fib_info instead of copy	2016-06-24 10:18:16 -07:00
tipc	tipc: fix NULL pointer dereference in shutdown()	2016-09-30 10:18:36 +02:00
unix	af_unix: move unix_mknod() out of bindlock	2017-02-04 09:45:09 +01:00
vmw_vsock	VSOCK: do not disconnect socket when peer has shutdown SEND only	2016-05-18 17:06:41 -07:00
wimax
wireless	nl80211: fix sched scan netlink socket owner destruction	2017-01-19 20:17:20 +01:00
x25	net: fix a kernel infoleak in x25 module	2016-05-18 17:06:43 -07:00
xfrm	xfrm: Fix crash observed during device unregistration and decryption	2016-04-20 15:42:05 +09:00
compat.c
Kconfig	net: Introduce L3 Master device abstraction	2015-09-29 20:40:32 -07:00
Makefile	net: Introduce L3 Master device abstraction	2015-09-29 20:40:32 -07:00
socket.c	sock: fix sendmmsg for partial sendmsg	2016-11-21 10:06:40 +01:00
sysctl_net.c	net: Use ns_capable_noaudit() when determining net sysctl permissions	2016-09-15 08:27:50 +02:00