Michal Kubecek 5b653b2a1c xfrm: fix freed block size calculation in xfrm_policy_fini() ...

Missing multiplication of block size by sizeof(struct hlist_head)
can cause xfrm_hash_free() to be called with wrong second argument
so that kfree() is called on a block allocated with vzalloc() or
__get_free_pages() or free_pages() is called with wrong order when
a namespace with enough policies is removed.

Bug introduced by commit a35f6c5d, i.e. versions >= 2.6.29 are
affected.

Signed-off-by: Michal Kubecek <mkubecek@suse.cz>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>

2013-01-21 06:50:04 +01:00

..

Kconfig

xfrm: make xfrm_algo.c a module

2012-05-15 13:13:34 -04:00

Makefile

xfrm: make xfrm_algo.c a module

2012-05-15 13:13:34 -04:00

xfrm_algo.c

xfrm_algo: drop an unnecessary inclusion

2012-05-15 13:13:34 -04:00

xfrm_hash.c

net: allow GFP_HIGHMEM in __vmalloc()

2010-11-21 10:04:04 -08:00

xfrm_hash.h

net: cleanup unsigned to unsigned int

2012-04-15 12:44:40 -04:00

xfrm_input.c

xfrm: Workaround incompatibility of ESN and async crypto

2012-09-04 14:09:45 -04:00

xfrm_ipcomp.c

net: xfrm: use __this_cpu_read per-cpu helper

2012-11-13 14:38:52 +01:00

xfrm_output.c

xfrm: Remove unused xfrm_state from xfrm_state_check_space

2012-03-22 19:29:58 -04:00

xfrm_policy.c

xfrm: fix freed block size calculation in xfrm_policy_fini()

2013-01-21 06:50:04 +01:00

xfrm_proc.c

net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules

2011-10-31 19:30:30 -04:00

xfrm_replay.c

net/xfrm/xfrm_replay: avoid division by zero

2013-01-18 06:19:49 +01:00

xfrm_state.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2012-10-02 13:38:27 -07:00

xfrm_sysctl.c

net: Don't export sysctls to unprivileged users

2012-11-18 20:30:55 -05:00

xfrm_user.c

net: Allow userns root to control llc, netfilter, netlink, packet, and xfrm

2012-11-18 20:32:45 -05:00