Nikolay Aleksandrov 1020ce3108 net: bridge: fix a null pointer dereference in br_afspec ...

We might call br_afspec() with p == NULL which is a valid use case if
the action is on the bridge device itself, but the bridge tunnel code
dereferences the p pointer without checking, so check if p is null
first.

Reported-by: Gustavo A. R. Silva <garsilva@embeddedor.com>
Fixes: efa5356b0d97 ("bridge: per vlan dst_metadata netlink support")
Signed-off-by: Nikolay Aleksandrov <nikolay@cumulusnetworks.com>
Acked-by: Roopa Prabhu <roopa@cumulusnetworks.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2017-06-06 16:05:31 -04:00

..

netfilter

ebtables: arpreply: Add the standard target sanity check

2017-05-16 10:24:27 +02:00

br_device.c

bridge: move bridge multicast cleanup to ndo_uninit

2017-04-25 14:02:39 -04:00

br_fdb.c

net: bridge: Fix improper taking over HW learned FDB

2017-04-30 22:46:32 -04:00

br_forward.c

bridge: add per-port broadcast flood flag

2017-04-27 16:34:29 -04:00

br_if.c

bridge: add per-port broadcast flood flag

2017-04-27 16:34:29 -04:00

br_input.c

bridge: drop netfilter fake rtable unconditionally

2017-03-13 13:01:10 -07:00

br_ioctl.c

bridge: move to workqueue gc

2017-02-06 22:53:13 -05:00

br_mdb.c

net: rtnetlink: plumb extended ack to doit function

2017-04-17 15:35:38 -04:00

br_multicast.c

bridge: implement missing ndo_uninit()

2017-04-11 22:22:44 -04:00

br_netfilter_hooks.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-03-23 16:41:27 -07:00

br_netfilter_ipv6.c

Replace <asm/uaccess.h> with <linux/uaccess.h> globally

2016-12-24 11:46:01 -08:00

br_netlink_tunnel.c

netlink: pass extended ACK struct to parsing functions

2017-04-13 13:58:22 -04:00

br_netlink.c

net: bridge: fix a null pointer dereference in br_afspec

2017-06-06 16:05:31 -04:00

br_nf_core.c

net: Remove protocol from struct dst_ops

2015-03-09 16:06:10 -04:00

br_private_stp.h

net: bridge: add helper to set topology change

2016-12-10 21:27:23 -05:00

br_private_tunnel.h

bridge: vlan dst_metadata hooks in ingress and egress paths

2017-02-03 15:21:22 -05:00

br_private.h

bridge: implement missing ndo_uninit()

2017-04-11 22:22:44 -04:00

br_stp_bpdu.c

netfilter: Pass net into okfn

2015-09-17 17:18:37 -07:00

br_stp_if.c

net: bridge: start hello timer only if device is up

2017-06-01 12:28:31 -04:00

br_stp_timer.c

bridge: start hello_timer when enabling KERNEL_STP in br_stp_start

2017-05-21 13:33:28 -04:00

br_stp.c

bridge: move to workqueue gc

2017-02-06 22:53:13 -05:00

br_switchdev.c

bridge: switchdev: Add forward mark support for stacked devices

2016-08-26 13:13:36 -07:00

br_sysfs_br.c

sched/headers: Prepare to move signal wakeup & sigpending methods from <linux/sched.h> into <linux/sched/signal.h>

2017-03-02 08:42:32 +01:00

br_sysfs_if.c

bridge: add per-port broadcast flood flag

2017-04-27 16:34:29 -04:00

br_vlan_tunnel.c

bridge: vlan_tunnel: explicitly reset metadata attrs to NULL on failure

2017-02-17 13:33:41 -05:00

br_vlan.c

bridge: Fix error path in nbp_vlan_init

2017-03-01 14:55:28 -08:00

br.c

netfilter: bridge: clarify bridge/netfilter message

2016-10-02 22:44:03 -04:00

Kconfig

bridge: Add vlan filtering infrastructure

2013-02-13 19:41:46 -05:00

Makefile

bridge: per vlan dst_metadata netlink support

2017-02-03 15:21:22 -05:00