Steffen Klassert e992ec0e55 xfrm4: Fix uninitialized memory read in _decode_session4 ... commit 8742dc86d0c7a9628117a989c11f04a9b6b898f3 upstream. We currently don't reload pointers pointing into skb header after doing pskb_may_pull() in _decode_session4(). So in case pskb_may_pull() changed the pointers, we read from random memory. Fix this by putting all the needed infos on the stack, so that we don't need to access the header pointers after doing pskb_may_pull(). Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") Change-Id: I8da27fd751dfe161d39054a332b5c4cc898eaf52 Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Ben Hutchings <ben@decadent.org.uk>		2019-08-15 21:02:28 +02:00
..
9p	…
802	…
8021q	…
appletalk	…
atm	…
ax25	…
batman-adv	…
bluetooth	Bluetooth: Check state in l2cap_disconnect_rsp	2019-08-05 03:10:33 +02:00
bridge	net: bridge: multicast: use rcu to access port list from br_multicast_start_querier	2019-08-15 21:02:28 +02:00
caif	…
can	…
ceph	…
core	net-sysfs: Fix memory leak in netdev_register_kobject	2019-08-13 03:29:23 +02:00
dcb	…
dccp	net/dccp: fix use after free in tw_timer_handler()	2019-07-27 22:08:37 +02:00
decnet	…
dns_resolver	dns_resolver: Do not accept domain names longer than 255 chars	2019-07-27 22:07:53 +02:00
dsa	…
ethernet	…
ieee802154	…
ipc_router	net: ipc_router: Initialize the sockaddr in recvmsg() handler	2019-07-27 22:08:44 +02:00
ipv4	xfrm4: Fix uninitialized memory read in _decode_session4	2019-08-15 21:02:28 +02:00
ipv6	xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module	2019-08-15 21:02:28 +02:00
ipx	…
irda	…
iucv	…
key	net: af_key: fix sleeping under rcu	2019-07-27 22:08:21 +02:00
l2tp	l2tp: fix infoleak in l2tp_ip6_recvmsg()	2019-07-27 22:11:27 +02:00
lapb	…
llc	llc: do not use sk_eat_skb()	2019-07-27 22:08:34 +02:00
mac80211	mac80211: use constant time comparison with keys	2019-07-27 21:45:47 +02:00
mac802154	…
netfilter	netfilter: compat: initialize all fields in xt_init	2019-07-27 22:10:42 +02:00
netlabel	…
netlink	net: Fix permission check in netlink_connect()	2019-07-27 22:08:32 +02:00
netrom	…
nfc	NFC: llcp: Limit size of SDP URI	2019-07-27 21:51:24 +02:00
openvswitch	…
packet	packet: in recvmsg msg_name return at least sizeof sockaddr_ll	2019-08-13 03:29:23 +02:00
phonet	…
rds	…
rfkill	net: rfkill: move poll work to power efficient workqueue	2019-07-27 22:11:06 +02:00
rmnet_data	net: rmnet_data: Change the log level for unknown IOCTL's	2019-07-27 21:51:01 +02:00
rose	…
rxrpc	rxrpc: Fix several cases where a padded len isn't checked in ticket decode	2019-07-27 21:44:13 +02:00
sched	net: Prevent invalid access to skb->prev in __qdisc_drop_all	2019-07-27 21:53:24 +02:00
sctp	sctp: fix a type cast warnings that causes a_rwnd gets the wrong value	2019-07-27 21:45:39 +02:00
sunrpc	kernel: make groups_sort calling a responsibility group_info allocators	2019-07-27 21:46:18 +02:00
tipc	…
unix	net/unix: don't show information about sockets from other namespaces	2019-07-27 21:45:50 +02:00
vmw_vsock	…
wimax	…
wireless	cfg80211: fix memory leak of wiphy device name	2019-07-27 22:11:14 +02:00
x25	…
xfrm	xfrm: Fix bucket count reported to userspace	2019-07-27 22:08:35 +02:00
Kconfig	…
Makefile	…
activity_stats.c	…
compat.c	net: support compat 64-bit time in {s,g}etsockopt	2019-07-27 21:49:09 +02:00
nonet.c	…
socket.c	kernel-wide: fix missing validations on __get/__put/__copy_to/__copy_from_user()	2019-07-27 22:10:26 +02:00
sysctl_net.c	…