Eric Dumazet 2856659935 ipv6: do not clear pinet6 field ...

[ Upstream commit f77d602124d865c38705df7fa25c03de9c284ad2 ]

We have seen multiple NULL dereferences in __inet6_lookup_established()

After analysis, I found that inet6_sk() could be NULL while the
check for sk_family == AF_INET6 was true.

Bug was added in linux-2.6.29 when RCU lookups were introduced in UDP
and TCP stacks.

Once an IPv6 socket, using SLAB_DESTROY_BY_RCU is inserted in a hash
table, we no longer can clear pinet6 field.

This patch extends logic used in commit fcbdf09d9652c891
("net: fix nulls list corruptions in sk_prot_alloc")

TCP/UDP/UDPLite IPv6 protocols provide their own .clear_sk() method
to make sure we do not clear pinet6 field.

At socket clone phase, we do not really care, as cloning the parent (non
NULL) pinet6 is not adding a fatal race.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2013-05-19 11:38:38 -07:00

..

datagram.c

net: fix infinite loop in __skb_recv_datagram()

2013-02-12 16:07:19 -05:00

dev_addr_lists.c

net: count hw_addr syncs so that unsync works properly.

2013-04-05 00:18:46 -04:00

dev_ioctl.c

net: move ioctl functions into a separated file

2013-02-18 12:27:32 -05:00

dev.c

net: use netdev_features_t in skb_needs_linearize()

2013-05-19 11:38:35 -07:00

drop_monitor.c

drop_monitor: dont sleep in atomic context

2012-06-04 11:42:01 -04:00

dst.c

ipv6: fix race condition regarding dst->expires and dst->from.

2013-02-20 15:11:45 -05:00

ethtool.c

net: vlan,ethtool: netdev_features_t is more than 32 bit

2013-05-19 11:38:35 -07:00

fib_rules.c

net: Enable a userns root rtnl calls that are safe for unprivilged users

2012-11-18 20:33:36 -05:00

filter.c

sk-filter: Add ability to lock a socket filter program

2013-01-17 03:21:25 -05:00

flow_dissector.c

flow_keys: include thoff into flow_keys for later usage

2013-03-20 12:14:36 -04:00

flow.c

net: fix the use of this_cpu_ptr

2013-03-29 15:13:27 -04:00

gen_estimator.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

gen_stats.c

gen_stats: Stop using NLA_PUT*().

2012-04-02 04:33:44 -04:00

iovec.c

net: get rid of some pointless casts to sockaddr

2012-03-11 19:11:22 -07:00

link_watch.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2012-10-02 13:38:27 -07:00

Makefile

net: move procfs code to net/core/net-procfs.c

2013-02-19 00:51:10 -05:00

neighbour.c

net neigh: Optimize neighbor entry size calculation.

2013-01-28 23:17:51 -05:00

net_namespace.c

new helper: file_inode(file)

2013-02-22 23:31:31 -05:00

net-procfs.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

net-sysfs.c

net/core: apply pm_runtime_set_memalloc_noio on network devices

2013-02-23 17:50:16 -08:00

net-sysfs.h

xps: Add CONFIG_XPS

2010-11-28 18:24:14 -08:00

net-traces.c

net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules

2011-10-31 19:30:30 -04:00

netevent.c

net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules

2011-10-31 19:30:30 -04:00

netpoll.c

netpoll: fix smatch warnings in netpoll core code

2013-02-13 11:56:46 -05:00

netprio_cgroup.c

net: core: Remove unnecessary alloc/OOM messages

2013-02-06 14:58:52 -05:00

pktgen.c

net: proc: change proc_net_remove to remove_proc_entry

2013-02-18 14:53:08 -05:00

request_sock.c

tcp: fix a panic on UP machines in reqsk_fastopen_remove

2013-01-14 18:10:05 -05:00

rtnetlink.c

rtnetlink: Call nlmsg_parse() with correct header length

2013-04-08 17:12:26 -04:00

scm.c

scm: Require CAP_SYS_ADMIN over the current pidns to spoof pids.

2013-03-17 17:16:16 -07:00

secure_seq.c

netfilter: ipv6: add IPv6 NAT support

2012-08-30 03:00:17 +02:00

skbuff.c

net: fix a wrong assignment in skb_split()

2013-02-20 15:11:44 -05:00

sock_diag.c

sock_diag: Simplify sock_diag_handlers[] handling in __sock_diag_rcv_msg

2013-02-23 13:51:54 -05:00

sock.c

ipv6: do not clear pinet6 field

2013-05-19 11:38:38 -07:00

stream.c

net: Fix the condition passed to sk_wait_event()

2010-10-03 20:41:32 -07:00

sysctl_net_core.c

net: avoid to hang up on sending due to sysctl configuration overflow.

2013-01-28 23:15:27 -05:00

timestamping.c

net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules

2011-10-31 19:30:30 -04:00

user_dma.c

net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules

2011-10-31 19:30:30 -04:00

utils.c

net: add doc for in4_pton()

2012-10-12 13:56:52 -04:00