Dmitry Safonov 91874ecf32 netlink: Don't shift on 64 for ngroups ... It's legal to have 64 groups for netlink_sock. As user-supplied nladdr->nl_groups is __u32, it's possible to subscribe only to first 32 groups. The check for correctness of .bind() userspace supplied parameter is done by applying mask made from ngroups shift. Which broke Android as they have 64 groups and the shift for mask resulted in an overflow. Fixes: 61f4b23769 ("netlink: Don't shift with UB on nlk->ngroups") Cc: "David S. Miller" <davem@davemloft.net> Cc: Herbert Xu <herbert@gondor.apana.org.au> Cc: Steffen Klassert <steffen.klassert@secunet.com> Cc: netdev@vger.kernel.org Cc: stable@vger.kernel.org Reported-and-Tested-by: Nathan Chancellor <natechancellor@gmail.com> Signed-off-by: Dmitry Safonov <dima@arista.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2018-08-04 17:52:51 -07:00
..
6lowpan
9p	net/9p/client.c: put refcount of trans_mod in error case in parse_opts()	2018-07-14 11:11:09 -07:00
802
8021q	net: fix use-after-free in GRO with ESP	2018-07-02 20:34:04 +09:00
appletalk	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
atm	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
ax25	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
batman-adv	batman-adv: Fix multicast TT issues with bogus ROAM flags	2018-06-23 10:29:33 +02:00
bluetooth	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
bpf	bpf: fix panic due to oob in bpf_prog_test_run_skb	2018-07-11 16:10:57 -07:00
bpfilter	bpfilter: include bpfilter_umh in assembly instead of using objcopy	2018-06-28 21:39:16 +09:00
bridge
caif	net: caif: Add a missing rcu_read_unlock() in caif_flow_cb	2018-07-21 16:14:39 -07:00
can	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
ceph
core	Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf	2018-07-28 21:02:21 -07:00
dcb
dccp	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
decnet	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
dns_resolver	KEYS: DNS: fix parsing multiple options	2018-07-16 11:22:14 -07:00
dsa	net: dsa: Do not suspend/resume closed slave_dev	2018-08-01 09:53:45 -07:00
ethernet
hsr
ieee802154	ieee802154: 6lowpan: set IFLA_LINK	2018-07-05 11:13:17 +02:00
ife
ipv4	ipv4: frags: handle possible skb truesize change	2018-07-31 14:41:29 -07:00
ipv6	Revert "net/ipv6: fix metrics leak"	2018-08-01 21:32:30 -07:00
iucv	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
kcm	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
key	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
l2tp	l2tp: fix missing refcount drop in pppol2tp_tunnel_ioctl()	2018-08-03 12:39:01 -07:00
l3mdev
lapb
llc	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
mac80211	nl80211/mac80211: allow non-linear skb in rx_control_port	2018-07-06 14:34:42 +02:00
mac802154
mpls
ncsi	net/ncsi: Use netdev_dbg for debug messages	2018-06-20 07:26:58 +09:00
netfilter	netfilter: nf_tables: move dumper state allocation into ->start	2018-07-24 00:36:33 +02:00
netlabel
netlink	netlink: Don't shift on 64 for ngroups	2018-08-04 17:52:51 -07:00
netrom	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
nfc	net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.	2018-07-18 10:51:45 -07:00
nsh	nsh: set mac len based on inner packet	2018-07-12 16:55:29 -07:00
openvswitch	openvswitch: meter: Fix setting meter id for new entries	2018-07-29 13:20:54 -07:00
packet	packet: reset network header if packet shorter than ll reserved space	2018-07-12 16:55:59 -07:00
phonet	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
psample
qrtr	net: qrtr: Reset the node and port ID of broadcast messages	2018-07-05 20:20:03 +09:00
rds	RDS: RDMA: Fix the NULL-ptr deref in rds_ib_get_mr	2018-07-26 14:03:07 -07:00
rfkill
rose	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
rxrpc	rxrpc: Fix user call ID check in rxrpc_service_prealloc_one	2018-08-01 11:49:49 -07:00
sched	net: sched: Using NULL instead of plain integer	2018-07-18 13:44:07 -07:00
sctp	sctp: fix the issue that pathmtu may be set lower than MINSEGMENT	2018-07-04 21:36:34 +09:00
smc	net/smc: no cursor update send in state SMC_INIT	2018-08-04 13:09:33 -07:00
strparser	strparser: Remove early eaten to fix full tcp receive buffer stall	2018-06-28 21:37:26 +09:00
sunrpc	NFS client bugfixes for Linux 4.18	2018-06-22 06:21:34 +09:00
switchdev
tipc	tipc: make function tipc_net_finalize() thread safe	2018-07-07 19:49:02 +09:00
tls	tls: check RCV_SHUTDOWN in tls_wait_data	2018-07-20 14:38:14 -07:00
unix	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
vmw_vsock	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
wimax
wireless	cfg80211: never ignore user regulatory hint	2018-07-24 09:11:31 +02:00
x25	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
xdp	net: xsk: don't return frames via the allocator on error	2018-07-31 02:03:19 +02:00
xfrm	xfrm: free skb if nlsk pointer is NULL	2018-06-25 16:43:36 +02:00
compat.c
Kconfig
Makefile	bpfilter: check compiler capability in Kconfig	2018-06-28 13:36:39 +09:00
socket.c	net: socket: Fix potential spectre v1 gadget in sock_is_registered	2018-07-28 22:43:30 -07:00
sysctl_net.c