joel16/android_kernel_sony_msm8994
1
0
Fork 0
mirror of https://github.com/joel16/android_kernel_sony_msm8994.git synced 2024-11-23 04:00:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
lineage-15.1
android_kernel_sony_msm8994/net
History
Amit Pundir c50c339c0d net: core: fix Null ptr dereference in UID-based routing 
sock_i_uid(struct sock *) is being called without checking
for a valid "struct sock" pointer, resulting in following
Null pointer dereference:

[   17.633071] Unable to handle kernel NULL pointer dereference at virtual address 00000198
[   17.641087] pgd = ffffffc07a554000
[   17.644465] [00000198] *pgd=00000000fa49b003, *pud=00000000fa49b003, *pmd=0000000000000000
[   17.652669] Internal error: Oops: 96000006 [#1] PREEMPT SMP
[   17.658186] Modules linked in:
[   17.661217] CPU: 1 PID: 1333 Comm: S21avahi-daemon Not tainted 4.0.0-rc7+ #2
[   17.668195] Hardware name: ARM Juno development board (r0) (DT)
[   17.674055] task: ffffffc976936800 ti: ffffffc079c0c000 task.ti: ffffffc079c0c000
[   17.681470] PC is at _raw_read_lock_bh+0x34/0x54
[   17.686042] LR is at sock_i_uid+0x24/0x64

Not that we need to check for valid pointer everytime we call
sock_i_uid() but plan is to at least do it when we are doing
this Null pointer check for other arguments.

Change-Id: I04521c1c38179687acd91d155ea2fd4658573ae7
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
2020-05-08 11:04:10 -04:00
..
9p 9p/trans_virtio.c: Fix broken zero-copy on vmalloc() buffers 2014-03-06 21:30:03 -08:00
802 net/802/mrp: fix lockdep splat 2013-05-14 13:02:30 -07:00
8021q 8021q: fix a potential memory leak 2014-07-28 08:00:04 -07:00
appletalk appletalk: Fix socket referencing in skb 2014-07-28 08:00:05 -07:00
atm arch: Mass conversion of smp_mb__*() 2014-08-15 11:45:28 -07:00
ax25 net: add validation for the socket syscall protocol argument 2017-09-12 16:35:40 +02:00
batman-adv batman-adv: set up network coding packet handlers during module init 2013-11-20 12:27:47 -08:00
bluetooth Bluetooth: Properly check L2CAP config option output buffer length 2017-09-16 16:45:52 +02:00
bridge This is the 3.10.84 stable release 2015-08-13 14:38:09 -07:00
caif This is the 3.10.84 stable release 2015-08-13 14:38:09 -07:00
can can: add missing initialisations in CAN related skbuffs 2015-03-26 15:00:58 +01:00
ceph libceph: introduce ceph_crypt() for in-place en/decryption 2017-09-02 18:04:02 +02:00
core net: fix infoleak in rtnetlink 2017-09-02 18:04:06 +02:00
dcb net: Use netlink_ns_capable to verify the permisions of netlink messages 2014-06-26 15:12:37 -04:00
dccp ipv6/dccp: do not inherit ipv6_mc_list from parent 2017-11-02 04:46:47 -07:00
decnet net: add validation for the socket syscall protocol argument 2017-09-12 16:35:40 +02:00
dns_resolver dns_resolver: Null-terminate the right string 2014-07-28 08:00:06 -07:00
dsa
ethernet
ieee802154 6lowpan: fix lockdep splats 2014-03-06 21:30:02 -08:00
ipc_router net: ipc_router: Register services only on client port 2017-01-02 21:16:25 -08:00
ipv4 net: core: fix Null ptr dereference in UID-based routing 2020-05-08 11:04:10 -04:00
ipv6 ip6_gre: fix ip6gre_err() invalid reads 2017-11-30 03:39:09 -08:00
ipx ipx: call ipxitf_put() in ioctl error path 2017-11-30 03:32:46 -08:00
irda net: add validation for the socket syscall protocol argument 2017-09-12 16:35:40 +02:00
iucv Merge upstream tag 'v3.10.49' into msm-3.10 2014-08-20 13:23:09 -07:00
key Merge upstream linux-stable v3.10.28 into msm-3.10 2014-03-24 14:28:34 -07:00
l2tp l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() 2017-03-17 05:49:35 -07:00
lapb
llc net/llc: avoid BUG_ON() in skb_orphan() 2017-09-16 23:21:03 +02:00
mac80211 This is the 3.10.84 stable release 2015-08-13 14:38:09 -07:00
mac802154 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2013-04-30 03:55:20 -04:00
netfilter netfilter: x_tables: check for size overflow 2017-09-14 17:05:36 +02:00
netlabel netlabel: improve domain mapping validation 2013-05-19 14:49:55 -07:00
netlink netlink: Fix dump skb leak/double free 2017-09-15 22:18:51 +02:00
netrom net: rework recvmsg handler msg_name and msg_namelen logic 2013-12-08 07:29:25 -08:00
nfc 32.1.A.1.185 2016-04-09 16:46:03 +02:00
openvswitch openvswitch: fix panic with multiple vlan headers 2014-10-15 08:31:57 +02:00
packet 32.4.A.1.54 2018-01-25 10:51:55 +01:00
phonet Merge upstream tag 'v3.10.49' into msm-3.10 2014-08-20 13:23:09 -07:00
rds This is the 3.10.84 stable release 2015-08-13 14:38:09 -07:00
rfkill 32.1.A.1.185 2016-04-09 16:46:03 +02:00
rmnet_data net: rmnet_data: Fix incorrect netlink handling 2017-01-26 09:47:45 -08:00
rose net: rose: restore old recvmsg behavior 2014-01-15 15:28:49 -08:00
rxrpc net: add length argument to skb_copy_and_csum_datagram_iovec 2017-09-02 18:04:00 +02:00
sched This is the 3.10.84 stable release 2015-08-13 14:38:09 -07:00
sctp sctp: deny peeloff operation on asocs with threads sleeping on it 2017-09-16 23:30:33 +02:00
sunrpc This is the 3.10.84 stable release 2015-08-13 14:38:09 -07:00
tipc tipc: clear 'next'-pointer of message fragments before reassembly 2014-07-28 08:00:05 -07:00
unix unix: properly account for FDs passed over unix sockets 2017-09-02 18:03:57 +02:00
vmw_vsock net: rework recvmsg handler msg_name and msg_namelen logic 2013-12-08 07:29:25 -08:00
wimax
wireless Merge remote-tracking branch 'caf/LA.BF64.1.2.3_rb1.18' into HEAD 2018-01-25 11:09:49 +01:00
x25 net: rework recvmsg handler msg_name and msg_namelen logic 2013-12-08 07:29:25 -08:00
xfrm xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window 2017-09-16 23:21:28 +02:00
activity_stats.c net: activity_stats: Stop using obsolete create_proc_read_entry api 2013-07-01 15:52:02 -07:00
compat.c net: compat: Update get_compat_msghdr() to match copy_msghdr_from_user() behaviour 2015-03-26 15:00:56 +01:00
Kconfig kernel: remove CONFIG_USE_GENERIC_SMP_HELPERS cleanly 2014-07-09 13:21:25 +03:00
Makefile msm: ipc: Support multi-platform 2014-01-13 13:51:09 -07:00
nonet.c
socket.c Merge remote-tracking branch 'caf/LA.BF64.1.2.3_rb1.6' into HEAD 2017-01-31 13:27:32 +01:00
sysctl_net.c net: Update the sysctl permissions handler to test effective uid/gid 2013-10-13 16:08:34 -07:00