Johannes Berg 3bbb42f09d ipv4: ip_check_defrag must not modify skb before unsharing ...

[ Upstream commit 1bf3751ec9 ]

ip_check_defrag() might be called from af_packet within the
RX path where shared SKBs are used, so it must not modify
the input SKB before it has unshared it for defragmentation.
Use skb_copy_bits() to get the IP header and only pull in
everything later.

The same is true for the other caller in macvlan as it is
called from dev->rx_handler which can also get a shared SKB.

Reported-by: Eric Leblond <eric@regit.org>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

2013-01-03 03:33:52 +00:00

..

netfilter

netfilter: nf_nat: don't check for port change on ICMP tuples

2012-12-06 11:20:10 +00:00

af_inet.c

ipv4: compat_ioctl is local to af_inet.c, make it static

2011-10-19 19:24:39 -04:00

ah4.c

ah: Don't return NET_XMIT_DROP on input.

2011-11-12 18:13:32 -05:00

arp.c

net: Don't proxy arp respond if iif == rt->dst.dev if private VLAN is disabled

2012-02-29 16:30:57 -08:00

cipso_ipv4.c

cipso: don't follow a NULL pointer when setsockopt() is called

2012-08-19 18:15:23 +01:00

datagram.c

…

devinet.c

net: reintroduce missing rcu_assign_pointer() calls

2012-02-03 09:22:20 -08:00

esp4.c

xfrm: take net hdr len into account for esp payload size calculation

2012-06-10 14:42:07 +01:00

fib_frontend.c

…

fib_lookup.h

…

fib_rules.c

net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules

2011-10-31 19:30:30 -04:00

fib_semantics.c

ipv4: fix the rcu race between free_fib_info and ip_route_output_slow

2012-06-10 14:42:02 +01:00

fib_trie.c

ipv4: Do not use dead fib_info entries.

2012-06-10 14:42:02 +01:00

gre.c

rcu: convert uses of rcu_assign_pointer(x, NULL) to RCU_INIT_POINTER

2011-08-02 04:29:23 -07:00

icmp.c

net: more accurate skb truesize

2011-10-13 16:05:07 -04:00

igmp.c

net: reintroduce missing rcu_assign_pointer() calls

2012-02-03 09:22:20 -08:00

inet_connection_sock.c

…

inet_diag.c

net-netlink: fix diag to export IPv4 tos for dual-stack IPv6 sockets

2011-11-22 16:03:10 -05:00

inet_fragment.c

…

inet_hashtables.c

net: Compute protocol sequence numbers and fragment IDs using MD5.

2011-08-06 18:33:19 -07:00

inet_lro.c

net: add skb frag size accessors

2011-10-19 03:10:46 -04:00

inet_timewait_sock.c

net: Fix files explicitly needing to include module.h

2011-10-31 19:30:28 -04:00

inetpeer.c

net: Compute protocol sequence numbers and fragment IDs using MD5.

2011-08-06 18:33:19 -07:00

ip_forward.c

ipv4: Save nexthop address of LSRR/SSRR option to IPCB.

2011-11-23 19:19:32 -05:00

ip_fragment.c

ipv4: ip_check_defrag must not modify skb before unsharing

2013-01-03 03:33:52 +00:00

ip_gre.c

ip_gre: dont increase dev->needed_headroom on a live device

2011-10-20 16:20:30 -04:00

ip_input.c

…

ip_options.c

ipv4: Fix wrong order of ip_rt_get_source() and update iph->daddr.

2012-02-29 16:31:02 -08:00

ip_output.c

ipv4: tcp: fix TOS value in ACK messages sent from TIME_WAIT

2011-10-24 03:06:21 -04:00

ip_sockglue.c

ipv4: avoid undefined behavior in do_ip_setsockopt()

2012-12-06 11:20:11 +00:00

ipcomp.c

…

ipconfig.c

net: have ipconfig not wait if no dev is available

2011-12-20 14:09:15 -05:00

ipip.c

net: reintroduce missing rcu_assign_pointer() calls

2012-02-03 09:22:20 -08:00

ipmr.c

net: ipv4: ipmr_expire_timer causes crash when removing net namespace

2012-09-19 15:04:57 +01:00

Kconfig

…

Makefile

…

netfilter.c

netfilter: possible unaligned packet header in ip_route_me_harder

2011-11-21 18:46:18 +01:00

ping.c

ping: dont increment ICMP_MIB_INERRORS

2011-11-18 14:38:59 -05:00

proc.c

net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules

2011-10-31 19:30:30 -04:00

protocol.c

…

raw.c

ipv4: raw: fix icmp_filter()

2012-10-10 03:31:31 +01:00

route.c

net: introduce DST_NOPEER dst flag

2011-12-22 22:34:56 -05:00

syncookies.c

tcp: fix syncookie regression

2012-03-23 11:21:22 -07:00

sysctl_net_ipv4.c

…

tcp_bic.c

…

tcp_cong.c

tcp: Apply device TSO segment limit earlier

2012-09-19 15:04:46 +01:00

tcp_cubic.c

…

tcp_diag.c

…

tcp_highspeed.c

…

tcp_htcp.c

…

tcp_hybla.c

…

tcp_illinois.c

net: fix divide by zero in tcp algorithm illinois

2012-11-16 16:47:16 +00:00

tcp_input.c

tcp: perform DMA to userspace only if there is a task waiting for it

2012-08-19 18:15:25 +01:00

tcp_ipv4.c

tcp: resets are misrouted

2012-10-30 23:26:35 +00:00

tcp_lp.c

…

tcp_minisocks.c

ipv6: tcp: fix TCLASS value in ACK messages sent from TIME_WAIT

2011-10-27 00:44:35 -04:00

tcp_output.c

tcp: Apply device TSO segment limit earlier

2012-09-19 15:04:46 +01:00

tcp_probe.c

…

tcp_scalable.c

…

tcp_timer.c

TCP: remove TCP_DEBUG

2011-10-24 17:36:08 -04:00

tcp_vegas.c

…

tcp_vegas.h

…

tcp_veno.c

…

tcp_westwood.c

…

tcp_yeah.c

…

tcp.c

tcp: fix FIONREAD/SIOCINQ

2012-11-16 16:47:15 +00:00

tunnel4.c

…

udp_impl.h

…

udp.c

Revert "udp: remove redundant variable"

2011-12-01 14:12:55 -05:00

udplite.c

Merge branch 'modsplit-Oct31_2011' of git://git.kernel.org/pub/scm/linux/kernel/git/paulg/linux

2011-11-06 19:44:47 -08:00

xfrm4_input.c

…

xfrm4_mode_beet.c

ipsec: be careful of non existing mac headers

2012-03-19 09:02:21 -07:00

xfrm4_mode_transport.c

…

xfrm4_mode_tunnel.c

ipsec: be careful of non existing mac headers

2012-03-19 09:02:21 -07:00

xfrm4_output.c

…

xfrm4_policy.c

ipv4: fix ipsec forward performance regression

2011-10-24 03:01:22 -04:00

xfrm4_state.c

net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules

2011-10-31 19:30:30 -04:00

xfrm4_tunnel.c

…