Matthew Daley cb101ed2c3 x25: Handle undersized/fragmented skbs ...

There are multiple locations in the X.25 packet layer where a skb is
assumed to be of at least a certain size and that all its data is
currently available at skb->data.  These assumptions are not checked,
hence buffer overreads may occur.  Use pskb_may_pull to check these
minimal size assumptions and ensure that data is available at skb->data
when necessary, as well as use skb_copy_bits where needed.

Signed-off-by: Matthew Daley <mattjd@gmail.com>
Cc: Eric Dumazet <eric.dumazet@gmail.com>
Cc: Andrew Hendry <andrew.hendry@gmail.com>
Cc: stable <stable@kernel.org>
Acked-by: Andrew Hendry <andrew.hendry@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2011-10-17 19:31:39 -04:00

..

af_x25.c

x25: Handle undersized/fragmented skbs

2011-10-17 19:31:39 -04:00

Kconfig

x25: remove the BKL

2011-03-05 10:55:45 +01:00

Makefile

[X.25]: Add call forwarding

2007-02-08 13:34:02 -08:00

sysctl_net_x25.c

sysctl net: Remove unused binary sysctl code

2009-11-12 02:05:06 -08:00

x25_dev.c

x25: Handle undersized/fragmented skbs

2011-10-17 19:31:39 -04:00

x25_facilities.c

x25: Handle undersized/fragmented skbs

2011-10-17 19:31:39 -04:00

x25_forward.c

Fix common misspellings

2011-03-31 11:26:23 -03:00

x25_in.c

x25: Handle undersized/fragmented skbs

2011-10-17 19:31:39 -04:00

x25_link.c

x25: Handle undersized/fragmented skbs

2011-10-17 19:31:39 -04:00

x25_out.c

x25: remove the BKL

2011-03-05 10:55:45 +01:00

x25_proc.c

net: x25: use seq_list_foo() helpers

2010-02-10 11:12:10 -08:00

x25_route.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

x25_subr.c

x25: Handle undersized/fragmented skbs

2011-10-17 19:31:39 -04:00

x25_timer.c

x25: Fix sleep from timer on socket destroy.

2009-06-16 05:40:30 -07:00