Mathias Krause aae13dc959 dccp: check ccid before dereferencing ... commit 276bdb82de upstream. ccid_hc_rx_getsockopt() and ccid_hc_tx_getsockopt() might be called with a NULL ccid pointer leading to a NULL pointer dereference. This could lead to a privilege escalation if the attacker is able to map page 0 and prepare it with a fake ccid_ops pointer. Signed-off-by: Mathias Krause <minipli@googlemail.com> Cc: Gerrit Renker <gerrit@erg.abdn.ac.uk> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com>		2014-02-10 16:11:33 -05:00
..
ccids	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
ackvec.c	dccp: Set per-connection CCIDs via socket options	2008-11-23 16:02:31 -08:00
ackvec.h	dccp: Minimise header option overhead in setting the MPS	2009-03-02 03:07:23 -08:00
ccid.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
ccid.h	dccp: check ccid before dereferencing	2014-02-10 16:11:33 -05:00
dccp.h	net: Make setsockopt() optlen be unsigned.	2009-09-30 16:12:20 -07:00
diag.c	dccp_diag: LISTEN sockets don't have CCIDs	2008-12-17 16:08:01 -08:00
feat.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
feat.h	dccp: Debugging functions for feature negotiation	2009-01-21 14:34:05 -08:00
input.c	dccp: fix oops on Reset after close	2011-06-26 12:46:54 -04:00
ipv4.c	inet: add RCU protection to inet->opt	2014-02-10 16:10:42 -05:00
ipv6.c	inet: add RCU protection to inet->opt	2014-02-10 16:10:42 -05:00
ipv6.h	Remove obsolete #include <linux/config.h>	2006-06-30 19:25:36 +02:00
Kconfig	dccp: Lockless integration of CCID congestion-control plugins	2009-01-04 21:42:53 -08:00
Makefile	dccp: Integrate the TFRC library with DCCP	2009-01-04 21:45:33 -08:00
minisocks.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
options.c	dccp: handle invalid feature options length	2012-03-14 10:57:54 -04:00
output.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
probe.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
proto.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
sysctl.c	sysctl net: Remove unused binary sysctl code	2009-11-12 02:05:06 -08:00
timer.c	net: Fix for dst_negative_advice	2009-10-20 18:55:46 -07:00