You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

David S. Miller 2570a4f542 ipv6: skb_dst() can be NULL in ipv6_hop_jumbo(). ... This fixes CERT-FI FICORA #341748 Discovered by Olli Jarva and Tuomo Untinen from the CROSS project at Codenomicon Ltd. Just like in CVE-2007-4567, we can't rely upon skb_dst() being non-NULL at this point. We fixed that in commit e76b2b2567 ("[IPV6]: Do no rely on skb->dst before it is assigned.") However commit 483a47d2fe ("ipv6: added net argument to IP6_INC_STATS_BH") put a new version of the same bug into this function. Complicating analysis further, this bug can only trigger when network namespaces are enabled in the build. When namespaces are turned off, the dev_net() does not evaluate it's argument, so the dereference would not occur. So, for a long time, namespaces couldn't be turned on unless SYSFS was disabled. Therefore, this code has largely been disabled except by people turning it on explicitly for namespace development. With help from Eugene Teo <eugene@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>		15 years ago
..
netfilter	netfilter: fix crashes in bridge netfilter caused by fragment jumps	15 years ago
Kconfig	…
Makefile	…
addrconf.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6	15 years ago
addrconf_core.c	…
addrlabel.c	…
af_inet6.c	…
ah6.c	xfrm: Use the user specified truncation length in ESP and AH	15 years ago
anycast.c	ipv6: use RCU to walk list of network devices	15 years ago
datagram.c	…
esp6.c	xfrm: Use the user specified truncation length in ESP and AH	15 years ago
exthdrs.c	ipv6: skb_dst() can be NULL in ipv6_hop_jumbo().	15 years ago
exthdrs_core.c	…
fib6_rules.c	net: Allow fib_rule_unregister to batch	15 years ago
icmp.c	sysctl net: Remove unused binary sysctl code	15 years ago
inet6_connection_sock.c	…
inet6_hashtables.c	tcp: Fix a connect() race with timewait sockets	15 years ago
ip6_fib.c	…
ip6_flowlabel.c	net: use net_eq to compare nets	15 years ago
ip6_input.c	…
ip6_output.c	ip: fix mc_loop checks for tunnels with multicast outer addresses	15 years ago
ip6_tunnel.c	net: Simplify ip6_tunnel pernet operations.	15 years ago
ip6mr.c	…
ipcomp6.c	…
ipv6_sockglue.c	…
mcast.c	ipv6: use RCU to walk list of network devices	15 years ago
mip6.c	…
ndisc.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6	15 years ago
netfilter.c	…
proc.c	…
protocol.c	…
raw.c	ipv6: avoid dev_hold()/dev_put() in rawv6_bind()	15 years ago
reassembly.c	ipv6: fix an oops when force unload ipv6 module	15 years ago
route.c	netns: fix net.ipv6.route.gc_min_interval_ms in netns	15 years ago
sit.c	net: Simplify ipip6 aka sit pernet operations.	15 years ago
syncookies.c	tcp: Revert per-route SACK/DSACK/TIMESTAMP changes.	15 years ago
sysctl_net_ipv6.c	sysctl net: Remove unused binary sysctl code	15 years ago
tcp_ipv6.c	tcp: Revert per-route SACK/DSACK/TIMESTAMP changes.	15 years ago
tunnel6.c	…
udp.c	IPv6: use ipv6_addr_v4mapped()	15 years ago
udp_impl.h	…
udplite.c	…
xfrm6_input.c	…
xfrm6_mode_beet.c	…
xfrm6_mode_ro.c	…
xfrm6_mode_transport.c	…
xfrm6_mode_tunnel.c	…
xfrm6_output.c	…
xfrm6_policy.c	sysctl net: Remove unused binary sysctl code	15 years ago
xfrm6_state.c	…
xfrm6_tunnel.c	…