Davide Caratti 13de4ed9e3 net: skbuff: ensure LSE is pullable before decrementing the MPLS ttl ...

skb_mpls_dec_ttl() reads the LSE without ensuring that it is contained in
the skb "linear" area. Fix this calling pskb_may_pull() before reading the
current ttl.

Found by code inspection.

Fixes: 2a2ea50870 ("net: sched: add mpls manipulation actions to TC")
Reported-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Signed-off-by: Davide Caratti <dcaratti@redhat.com>
Link: https://lore.kernel.org/r/53659f28be8bc336c113b5254dc637cc76bbae91.1606987074.git.dcaratti@redhat.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

2020-12-03 11:13:21 -08:00

..

bpf_sk_storage.c

bpf: Change bpf_sk_storage_*() to accept ARG_PTR_TO_BTF_ID_SOCK_COMMON

2020-09-25 13:58:01 -07:00

datagram.c

…

datagram.h

…

dev_addr_lists.c

net: core: add nested_level variable in net_device

2020-09-28 15:00:15 -07:00

dev_ioctl.c

…

dev.c

net, xsk: Avoid taking multiple skbuff references

2020-11-24 22:39:56 +01:00

devlink.c

devlink: Make sure devlink instance and port are in same net namespace

2020-11-25 17:26:34 -08:00

drop_monitor.c

genetlink: move to smaller ops wherever possible

2020-10-02 19:11:11 -07:00

dst_cache.c

…

dst.c

…

failover.c

…

fib_notifier.c

…

fib_rules.c

…

filter.c

net: Properly typecast int values to set sk_max_pacing_rate

2020-10-22 12:18:25 -07:00

flow_dissector.c

net: flow_dissector: avoid indirect call to DSA .flow_dissect for generic case

2020-09-26 14:17:59 -07:00

flow_offload.c

…

gen_estimator.c

…

gen_stats.c

…

gro_cells.c

gro_cells: reduce number of synchronize_net() calls

2020-11-25 11:28:12 -08:00

hwbm.c

…

link_watch.c

…

lwt_bpf.c

…

lwtunnel.c

…

Makefile

…

neighbour.c

net: Exempt multicast addresses from five-second neighbor lifetime

2020-11-13 14:24:39 -08:00

net_namespace.c

bpf, net: Rework cookie generator as per-cpu one

2020-09-30 11:50:35 -07:00

net-procfs.c

…

net-sysfs.c

net-sysfs: Fix inconsistent of format with argument type in net-sysfs.c

2020-10-01 18:45:23 -07:00

net-sysfs.h

…

net-traces.c

…

netclassid_cgroup.c

…

netevent.c

…

netpoll.c

net: Have netpoll bring-up DSA management interface

2020-11-18 11:04:11 -08:00

netprio_cgroup.c

…

page_pool.c

…

pktgen.c

pktgen: Fix inconsistent of format with argument type in pktgen.c

2020-10-01 18:45:23 -07:00

ptp_classifier.c

…

request_sock.c

…

rtnetlink.c

rtnetlink: fix data overflow in rtnl_calcit()

2020-10-21 18:24:08 -07:00

scm.c

…

secure_seq.c

…

skbuff.c

net: skbuff: ensure LSE is pullable before decrementing the MPLS ttl

2020-12-03 11:13:21 -08:00

skmsg.c

bpf, sockmap: Avoid failures from skb_to_sgvec when skb has frag_list

2020-11-18 00:14:04 +01:00

sock_diag.c

bpf, net: Rework cookie generator as per-cpu one

2020-09-30 11:50:35 -07:00

sock_map.c

net, sockmap: Don't call bpf_prog_put() on NULL pointer

2020-10-15 21:05:23 +02:00

sock_reuseport.c

…

sock.c

net: Properly typecast int values to set sk_max_pacing_rate

2020-10-22 12:18:25 -07:00

stream.c

…

sysctl_net_core.c

…

timestamping.c

…

tso.c

…

utils.c

…

xdp.c

…