Vladislav Yasevich a601266e4f [SCTP]: Validate the parameter length in HB-ACK chunk. ...

If SCTP receives a badly formatted HB-ACK chunk, it is possible
that we may access invalid memory and potentially have a buffer
overflow.  We should really make sure that the chunk format is
what we expect, before attempting to touch the data.

Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>

2006-05-19 14:25:53 -07:00

..

associola.c

[SCTP]: Update SCTP_PEER_ADDR_PARAMS socket option to the latest api draft.

2006-01-03 13:11:11 -08:00

bind_addr.c

[PATCH] gfp flags annotations - part 1

2005-10-08 15:00:57 -07:00

chunk.c

[PATCH] gfp flags annotations - part 1

2005-10-08 15:00:57 -07:00

command.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

crc32c.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

debug.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

endpointola.c

[SCTP]: Include ulpevents in socket receive buffer accounting.

2005-11-11 16:08:24 -08:00

input.c

[SCTP]: A better solution to fix the race between sctp_peeloff() and

2006-05-19 11:01:18 -07:00

inqueue.c

[SCTP]: Allow spillover of receive buffer to avoid deadlock.

2006-05-05 17:02:09 -07:00

ipv6.c

[NET]: Identation & other cleanups related to compat_[gs]etsockopt cset

2006-03-20 22:48:35 -08:00

Kconfig

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

Makefile

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

objcnt.c

[SCTP]: Audit return code of create_proc_*

2005-07-18 13:38:07 -07:00

output.c

[SCTP]: Fix 'fast retransmit' to send a TSN only once.

2006-02-02 16:57:31 -08:00

outqueue.c

[SCTP]: Fix 'fast retransmit' to send a TSN only once.

2006-02-02 16:57:31 -08:00

primitive.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

proc.c

[PATCH] for_each_possible_cpu: network codes

2006-04-11 06:18:31 -07:00

protocol.c

[NET]: Identation & other cleanups related to compat_[gs]etsockopt cset

2006-03-20 22:48:35 -08:00

sm_make_chunk.c

[SCTP]: Fix machine check/connection hang on IA64.

2006-01-17 11:55:57 -08:00

sm_sideeffect.c

[SCTP]: Set sk_err so that poll wakes up after a non-blocking connect failure.

2006-05-19 10:58:12 -07:00

sm_statefuns.c

[SCTP]: Validate the parameter length in HB-ACK chunk.

2006-05-19 14:25:53 -07:00

sm_statetable.c

[SCTP]: Fix state table entries for chunks received in CLOSED state.

2006-05-05 17:05:23 -07:00

socket.c

[SCTP]: A better solution to fix the race between sctp_peeloff() and

2006-05-19 11:01:18 -07:00

ssnmap.c

[PATCH] gfp flags annotations - part 1

2005-10-08 15:00:57 -07:00

sysctl.c

[SCTP]: Fix bad sysctl formatting of SCTP timeout values on 64-bit m/cs.

2006-01-17 11:55:17 -08:00

transport.c

[SCTP]: Fix bad sysctl formatting of SCTP timeout values on 64-bit m/cs.

2006-01-17 11:55:17 -08:00

tsnmap.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ulpevent.c

[SCTP]: Include ulpevents in socket receive buffer accounting.

2005-11-11 16:08:24 -08:00

ulpqueue.c

[SCTP]: Prevent possible infinite recursion with multiple bundled DATA.

2006-05-05 17:03:49 -07:00