Erik Hugne d7bb74c38c tipc: fix out of bounds indexing ... Commit 78acb1f9b8 ("tipc: add ioctl to fetch link names") introduced a buffer overflow bug where specially crafted ioctl requests could cause out-of-bounds indexing of the node->links array. This was caused by an incorrect check vs MAX_BEARERS, and the static code checker complaint is: net/tipc/node.c:459 tipc_node_get_linkname() error: buffer overflow 'node->links' 2 <= 2 Signed-off-by: Erik Hugne <erik.hugne@ericsson.com> Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2014-04-28 14:43:35 -04:00
..
9p	A bunch of updates and cleanup within the transport layer,	2014-04-11 14:14:57 -07:00
802	neigh: use NEIGH_VAR_INIT in ndo_neigh_setup functions.	2014-01-16 11:31:58 -08:00
8021q	vlan: unnecessary to check if vlan_pcpu_stats is NULL	2014-04-22 21:27:57 -04:00
appletalk	appletalk: fix checkpatch error with indent	2014-02-14 16:18:32 -05:00
atm	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
ax25	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
batman-adv	batman-adv: Start new development cycle	2014-03-22 09:18:59 +01:00
bluetooth	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
bridge	bridge: Fix double free and memory leak around br_allowed_ingress	2014-04-11 15:12:47 -04:00
caif	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
can	can: remove CAN FD compatibility for CAN 2.0 sockets	2014-03-03 14:29:52 +01:00
ceph	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
core	ethtool: exit the loop when invalid index occurs	2014-04-28 13:28:43 -04:00
dcb	dcb: use __dev_get_by_name instead of dev_get_by_name to find interface	2014-01-14 18:50:46 -08:00
dccp	ipv4: add a sock pointer to ip_queue_xmit()	2014-04-15 12:58:34 -04:00
decnet	ipv4: add a sock pointer to dst->output() path.	2014-04-15 13:47:15 -04:00
dns_resolver	net/*: Fix FSF address in file headers	2013-12-06 12:37:57 -05:00
dsa	dsa: Use ether_addr_copy	2014-01-21 18:13:05 -08:00
ethernet	net: eth_type_trans() should use skb_header_pointer()	2014-01-16 15:30:31 -08:00
hsr	hsr: replace del_timer by del_timer_sync	2014-03-27 15:28:06 -04:00
ieee802154	6lowpan: make lowpan_cb static	2014-04-20 18:18:55 -04:00
ipv4	ipv4: Use predefined value for readability	2014-04-28 13:28:43 -04:00
ipv6	ip6gre: add x-netns support	2014-04-23 14:53:36 -04:00
ipx	ipx: implement shutdown()	2014-02-12 19:26:32 -05:00
irda	net: add build-time checks for msg->msg_name size	2014-01-18 23:04:16 -08:00
iucv	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
key	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
l2tp	ipv4: add a sock pointer to ip_queue_xmit()	2014-04-15 12:58:34 -04:00
lapb	net/lapb: re-send packets on timeout	2013-09-23 16:52:45 -04:00
llc	llc: remove noisy WARN from llc_mac_hdr_init	2014-01-28 18:01:32 -08:00
mac80211	mac80211: exclude AP_VLAN interfaces from tx power calculation	2014-04-11 09:37:41 +02:00
mac802154	mac802154: fix duplicate #include headers	2014-04-07 13:18:44 -04:00
mpls	ipip: add GSO/TSO support	2013-10-19 19:36:19 -04:00
netfilter	netlink: have netlink per-protocol bind function return an error code.	2014-04-22 21:42:26 -04:00
netlabel	netlabel: Fix FSF address in file headers	2013-12-06 12:37:56 -05:00
netlink	netlink: implement unbind to netlink_setsockopt NETLINK_DROP_MEMBERSHIP	2014-04-22 21:42:26 -04:00
netrom	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
nfc	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
openvswitch	vxlan: add x-netns support	2014-04-24 16:18:26 -04:00
packet	net: Fix ns_capable check in sock_diag_put_filterinfo	2014-04-22 12:49:39 -04:00
phonet	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
rds	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
rfkill	net: rfkill: move poll work to power efficient workqueue	2014-02-04 21:58:16 +01:00
rose	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
rxrpc	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
sched	sched, act: allow to clear all actions as well	2014-04-27 23:42:39 -04:00
sctp	sctp: add support for busy polling to sctp protocol	2014-04-20 18:18:55 -04:00
sunrpc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2014-04-12 17:31:22 -07:00
tipc	tipc: fix out of bounds indexing	2014-04-28 14:43:35 -04:00
unix	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
vmw_vsock	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
wimax	wimax: remove dead code	2013-11-21 13:09:42 -05:00
wireless	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next into for-davem	2014-03-21 14:02:04 -04:00
x25	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
xfrm	ipv4: add a sock pointer to dst->output() path.	2014-04-15 13:47:15 -04:00
compat.c	net/compat: convert to COMPAT_SYSCALL_DEFINE with changing parameter types	2014-03-06 16:30:45 +01:00
Kconfig	Merge branch 'for-3.15' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup	2014-04-03 13:05:42 -07:00
Makefile	net: move 6lowpan compression code to separate module	2014-01-15 15:36:38 -08:00
nonet.c
socket.c	net: use SYSCALL_DEFINEx for sys_recv	2014-04-16 15:15:05 -04:00
sysctl_net.c	net: Update the sysctl permissions handler to test effective uid/gid	2013-10-07 15:57:56 -04:00