Willem de Bruijn c27927e372 packet: fix tp_reserve race in packet_set_ring ... Updates to tp_reserve can race with reads of the field in packet_set_ring. Avoid this by holding the socket lock during updates in setsockopt PACKET_RESERVE. This bug was discovered by syzkaller. Fixes: 8913336a7e ("packet: add PACKET_RESERVE sockopt") Reported-by: Andrey Konovalov <andreyknvl@google.com> Signed-off-by: Willem de Bruijn <willemb@google.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2017-08-10 09:52:12 -07:00
..
6lowpan
9p	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-07-15 12:00:42 -07:00
802
8021q
appletalk
atm	net, atm: convert eg_cache_entry.use from atomic_t to refcount_t	2017-07-04 22:35:16 +01:00
ax25	net, ax25: convert ax25_cb.refcount from atomic_t to refcount_t	2017-07-04 22:35:19 +01:00
batman-adv	batman-adv: fix TT sync flag inconsistencies	2017-07-31 11:17:38 +02:00
bluetooth	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2017-07-05 12:31:59 -07:00
bpf
bridge	net: bridge: fix dest lookup when vlan proto doesn't match	2017-07-14 08:19:23 -07:00
caif
can
ceph	libceph: make RECOVERY_DELETES feature create a new interval	2017-08-01 16:46:45 +02:00
core	net: avoid skb_warn_bad_offload false positives on UFO	2017-08-08 21:39:01 -07:00
dcb
dccp	dccp: fix a memleak for dccp_feat_init err process	2017-07-27 00:01:05 -07:00
decnet	net, decnet: convert dn_fib_info.fib_clntref from atomic_t to refcount_t	2017-07-04 22:35:15 +01:00
dns_resolver
dsa	net: dsa: Initialize ds->cpu_port_mask earlier	2017-07-24 17:36:27 -07:00
ethernet
hsr
ieee802154
ife
ipv4	udp: consistently apply ufo or fragmentation	2017-08-10 09:52:12 -07:00
ipv6	udp: consistently apply ufo or fragmentation	2017-08-10 09:52:12 -07:00
ipx	net, ipx: convert ipx_route.refcnt from atomic_t to refcount_t	2017-07-04 22:35:17 +01:00
irda	Merge branch 'work.memdup_user' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-07-05 16:05:24 -07:00
iucv
kcm
key	net, xfrm: convert xfrm_policy.refcnt from atomic_t to refcount_t	2017-07-04 22:35:18 +01:00
l2tp	net, l2tp: convert l2tp_session.ref_count from atomic_t to refcount_t	2017-07-04 22:35:15 +01:00
l3mdev
lapb	net, lapb: convert lapb_cb.refcnt from atomic_t to refcount_t	2017-07-04 22:35:16 +01:00
llc	net, llc: convert llc_sap.refcnt from atomic_t to refcount_t	2017-07-04 22:35:15 +01:00
mac80211
mac802154
mpls	mpls: fix uninitialized in_label var warning in mpls_getroute	2017-07-08 11:26:41 +01:00
ncsi
netfilter	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-07-20 16:33:39 -07:00
netlabel
netlink
netrom	net, netrom: convert nr_node.refcount from atomic_t to refcount_t	2017-07-04 22:35:17 +01:00
nfc
openvswitch	openvswitch: fix potential out of bound access in parse_ct	2017-07-24 16:25:06 -07:00
packet	packet: fix tp_reserve race in packet_set_ring	2017-08-10 09:52:12 -07:00
phonet
psample
qrtr
rds	rds: Reintroduce statistics counting	2017-08-08 21:03:47 -07:00
rfkill
rose
rxrpc
sched	net: sched: set xt_tgchk_param par.nft_compat as 0 in ipt_init_target	2017-08-09 22:46:44 -07:00
sctp	sctp: fix an array overflow when all ext chunks are set	2017-07-14 09:05:10 -07:00
smc
strparser
sunrpc	NFS client bugfixes for 4.13	2017-07-21 16:26:01 -07:00
switchdev
tipc	tipc: remove premature ESTABLISH FSM event at link synchronization	2017-08-09 22:38:06 -07:00
tls	TLS: Fix length check in do_tls_getsockopt_tx()	2017-07-06 10:58:19 +01:00
unix	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2017-07-05 12:31:59 -07:00
vmw_vsock
wimax
wireless	netlink validation fixes for nl80211	2017-07-07 11:35:55 +01:00
x25	net, x25: convert x25_neigh.refcnt from atomic_t to refcount_t	2017-07-04 22:35:18 +01:00
xfrm	net, xfrm: convert sec_path.refcnt from atomic_t to refcount_t	2017-07-04 22:35:18 +01:00
compat.c	get_compat_bpf_fprog(): don't copyin field-by-field	2017-07-04 13:14:34 -04:00
Kconfig
Makefile
socket.c	net/socket: fix type in assignment and trim long line	2017-07-24 14:17:01 -07:00
sysctl_net.c