Octavian Purdila fcbdf09d96 net: fix nulls list corruptions in sk_prot_alloc ...

Special care is taken inside sk_port_alloc to avoid overwriting
skc_node/skc_nulls_node. We should also avoid overwriting
skc_bind_node/skc_portaddr_node.

The patch fixes the following crash:

 BUG: unable to handle kernel paging request at fffffffffffffff0
 IP: [<ffffffff812ec6dd>] udp4_lib_lookup2+0xad/0x370
 [<ffffffff812ecc22>] __udp4_lib_lookup+0x282/0x360
 [<ffffffff812ed63e>] __udp4_lib_rcv+0x31e/0x700
 [<ffffffff812bba45>] ? ip_local_deliver_finish+0x65/0x190
 [<ffffffff812bbbf8>] ? ip_local_deliver+0x88/0xa0
 [<ffffffff812eda35>] udp_rcv+0x15/0x20
 [<ffffffff812bba45>] ip_local_deliver_finish+0x65/0x190
 [<ffffffff812bbbf8>] ip_local_deliver+0x88/0xa0
 [<ffffffff812bb2cd>] ip_rcv_finish+0x32d/0x6f0
 [<ffffffff8128c14c>] ? netif_receive_skb+0x99c/0x11c0
 [<ffffffff812bb94b>] ip_rcv+0x2bb/0x350
 [<ffffffff8128c14c>] netif_receive_skb+0x99c/0x11c0

Signed-off-by: Leonard Crestez <lcrestez@ixiacom.com>
Signed-off-by: Octavian Purdila <opurdila@ixiacom.com>
Acked-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2010-12-16 14:26:56 -08:00

..

netfilter

ipv4: netfilter: ip_tables: fix information leak to userland

2010-11-03 08:45:06 +01:00

af_inet.c

net: build_ehash_secret() and rt_bind_peer() cleanups

2010-08-20 00:50:16 -07:00

ah4.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

arp.c

neigh: Protect neigh->ha[] with a seqlock

2010-10-11 12:54:04 -07:00

cipso_ipv4.c

Update broken web addresses in the kernel.

2010-10-18 11:03:14 +02:00

datagram.c

net: return operator cleanup

2010-09-23 14:33:39 -07:00

devinet.c

inet: RCU changes in inetdev_by_index()

2010-10-19 03:50:48 -07:00

esp4.c

xfrm: SA lookups signature with mark

2010-02-22 16:20:22 -08:00

fib_frontend.c

fib: Fix fib zone and its hash leak on namespace stop

2010-10-28 10:27:03 -07:00

fib_hash.c

fib: Fix fib zone and its hash leak on namespace stop

2010-10-28 10:27:03 -07:00

fib_lookup.h

fib: fib_result_assign() should not change fib refcounts

2010-11-04 12:05:32 -07:00

fib_rules.c

fib: RCU conversion of fib_lookup()

2010-10-05 20:39:38 -07:00

fib_semantics.c

fib: introduce fib_alias_accessed() helper

2010-10-21 03:09:41 -07:00

fib_trie.c

net: allow GFP_HIGHMEM in __vmalloc()

2010-11-21 10:04:04 -08:00

gre.c

tunnels: add _rcu annotations

2010-10-25 13:09:45 -07:00

icmp.c

xfrm: update flowi saddr in icmp_send if unset

2010-11-16 11:43:39 -08:00

igmp.c

inet: fix ip_mc_drop_socket()

2010-11-09 08:26:42 -08:00

inet_connection_sock.c

net/ipv4: EXPORT_SYMBOL cleanups

2010-07-12 12:57:54 -07:00

inet_diag.c

inet_diag: Make sure we actually run the same bytecode we audited.

2010-11-04 12:26:34 -07:00

inet_fragment.c

net/ipv4: EXPORT_SYMBOL cleanups

2010-07-12 12:57:54 -07:00

inet_hashtables.c

inet: Fix __inet_inherit_port() to correctly increment bsockets and num_owners

2010-11-28 18:18:44 -08:00

inet_lro.c

net/ipv4: Move && and || to end of previous line

2009-11-23 10:41:23 -08:00

inet_timewait_sock.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

inetpeer.c

inetpeer: __rcu annotations

2010-10-27 11:37:33 -07:00

ip_forward.c

net-next: remove useless union keyword

2010-06-10 23:31:35 -07:00

ip_fragment.c

net: return operator cleanup

2010-09-23 14:33:39 -07:00

ip_gre.c

ip_gre: fix fallback tunnel setup

2010-10-30 16:21:28 -07:00

ip_input.c

net: use this_cpu_ptr()

2010-06-28 23:24:29 -07:00

ip_options.c

bridge : Sanitize skb before it enters the IP stack

2010-09-19 12:42:34 -07:00

ip_output.c

Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6

2010-09-27 01:03:03 -07:00

ip_sockglue.c

ipv4: add __rcu annotations to ip_ra_chain

2010-10-25 14:18:28 -07:00

ipcomp.c

xfrm: SA lookups signature with mark

2010-02-22 16:20:22 -08:00

ipconfig.c

ipconfig: send host-name in DHCP requests

2010-06-02 07:05:03 -07:00

ipip.c

tunnels: Fix tunnels change rcu protection

2010-10-27 14:20:08 -07:00

ipmr.c

ipmr: cleanups

2010-10-03 21:50:53 -07:00

Kconfig

Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial

2010-10-24 13:41:39 -07:00

Makefile

PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)

2010-08-21 23:05:39 -07:00

netfilter.c

Merge branch 'master' of /repos/git/net-next-2.6

2010-06-15 17:31:06 +02:00

proc.c

tcp: Replace time wait bucket msg by counter

2010-12-08 12:16:33 -08:00

protocol.c

net: add __rcu annotations to protocol

2010-10-27 11:37:31 -07:00

raw.c

net: simplify flags for tx timestamping

2010-08-19 00:08:30 -07:00

route.c

ipv4: add __rcu annotations to routes.c

2010-10-27 11:37:31 -07:00

syncookies.c

syncookies: add support for ECN

2010-06-26 22:00:03 -07:00

sysctl_net_ipv4.c

tcp: restrict net.ipv4.tcp_adv_win_scale (#20312)

2010-11-28 10:39:45 -08:00

tcp_bic.c

tcp: add helper for AI algorithm

2009-03-02 03:00:15 -08:00

tcp_cong.c

net/ipv4: Eliminate kstrdup memory leak

2010-08-27 19:31:56 -07:00

tcp_cubic.c

tcp: add helper for AI algorithm

2009-03-02 03:00:15 -08:00

tcp_diag.c

tcp: diag: Dont report negative values for rx queue

2009-12-03 16:06:13 -08:00

tcp_highspeed.c

[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid

2008-01-28 14:55:41 -08:00

tcp_htcp.c

net/ipv4: Move && and || to end of previous line

2009-11-23 10:41:23 -08:00

tcp_hybla.c

TCP: tcp_hybla: Fix integer overflow in slow start increment

2010-06-02 07:15:48 -07:00

tcp_illinois.c

Update broken web addresses in the kernel.

2010-10-18 11:03:14 +02:00

tcp_input.c

net: avoid limits overflow

2010-11-10 12:12:00 -08:00

tcp_ipv4.c

netns: Don't leak others' openreq-s in proc

2010-11-27 22:57:48 -08:00

tcp_lp.c

net/ipv4: Move && and || to end of previous line

2009-11-23 10:41:23 -08:00

tcp_minisocks.c

tcp: Replace time wait bucket msg by counter

2010-12-08 12:16:33 -08:00

tcp_output.c

tcp: protect sysctl_tcp_cookie_size reads

2010-12-08 12:34:09 -08:00

tcp_probe.c

llseek: automatically add .llseek fop

2010-10-15 15:53:27 +02:00

tcp_scalable.c

tcp: add helper for AI algorithm

2009-03-02 03:00:15 -08:00

tcp_timer.c

tcp: use correct counters in CA_CWR state too

2010-10-17 13:46:33 -07:00

tcp_vegas.c

tcp: tcp_vegas ssthresh bugfix

2009-05-25 22:44:59 -07:00

tcp_vegas.h

…

tcp_veno.c

Update broken web addresses in the kernel.

2010-10-18 11:03:14 +02:00

tcp_westwood.c

net: return operator cleanup

2010-09-23 14:33:39 -07:00

tcp_yeah.c

net/ipv4: Move && and || to end of previous line

2009-11-23 10:41:23 -08:00

tcp.c

tcp: Make TCP_MAXSEG minimum more correct.

2010-11-24 11:47:22 -08:00

tunnel4.c

tunnels: add __rcu annotations

2010-10-27 11:37:32 -07:00

udp_impl.h

net: Make setsockopt() optlen be unsigned.

2009-09-30 16:12:20 -07:00

udp.c

net: fix nulls list corruptions in sk_prot_alloc

2010-12-16 14:26:56 -08:00

udplite.c

net: fix nulls list corruptions in sk_prot_alloc

2010-12-16 14:26:56 -08:00

xfrm4_input.c

net/ipv4: EXPORT_SYMBOL cleanups

2010-07-12 12:57:54 -07:00

xfrm4_mode_beet.c

ipsec: Interfamily IPSec BEET

2008-08-06 02:39:30 -07:00

xfrm4_mode_transport.c

[IPSEC]: Use IPv6 calling convention as the convention for x->mode->output

2007-10-10 16:55:54 -07:00

xfrm4_mode_tunnel.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

xfrm4_output.c

netfilter: ipv4: use NFPROTO values for NF_HOOK invocation

2010-03-25 16:00:30 +01:00

xfrm4_policy.c

net dst: use a percpu_counter to track entries

2010-10-11 13:06:53 -07:00

xfrm4_state.c

xfrm: Allow different selector family in temporary state

2010-09-20 11:11:38 -07:00

xfrm4_tunnel.c

net: struct xfrm_tunnel in read_mostly section

2010-08-30 13:50:45 -07:00