This repository has been archived on 2022-02-17. You can view files and clone it, but cannot push or open issues or pull requests.

Vegard Nossum 619e803d3c netlink: fix (theoretical) overrun in message iteration ... See commit 1045b03e07 ("netlink: fix overrun in attribute iteration") for a detailed explanation of why this patch is necessary. In short, nlmsg_next() can make "remaining" go negative, and the remaining >= sizeof(...) comparison will promote "remaining" to an unsigned type, which means that the expression will evaluate to true for negative numbers, even though it was not intended. I put "theoretical" in the title because I have no evidence that this can actually happen, but I suspect that a crafted netlink packet can trigger some badness. Note that the last test, which seemingly has the exact same problem (also true for nla_ok()), is perfectly OK, since we already know that remaining is positive. Signed-off-by: Vegard Nossum <vegard.nossum@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2008-12-25 17:21:17 -08:00
..
acpi	ACPICA: disable _BIF warning	2008-11-27 02:17:30 -05:00
asm-arm	…
asm-frv	…
asm-generic	atomic: fix a typo in atomic_long_xchg()	2008-12-10 08:01:53 -08:00
asm-h8300	…
asm-m32r	…
asm-m68k	proc: move /proc/hardware to m68k-specific code	2008-10-23 14:24:03 +04:00
asm-mn10300	MN10300: Fix __put_user_asm8()	2008-12-10 13:34:33 -08:00
asm-xtensa	Merge git://git.kernel.org/pub/scm/linux/kernel/git/czankel/xtensa-2.6	2008-10-23 09:16:56 -07:00
crypto	…
drm	drm: move drm vblank initialization/cleanup to driver load/unload	2008-11-25 09:49:03 +10:00
keys	…
linux	net: Remove unused netdev arg from some NAPI interfaces.	2008-12-22 20:43:12 -08:00
math-emu	math-emu: Fix thinko in _FP_DIV	2008-10-22 22:09:59 -07:00
media	V4L/DVB (9335): videobuf: split unregister bus creating self-contained frontend de-allocator	2008-10-21 14:32:08 -02:00
mtd	…
net	netlink: fix (theoretical) overrun in message iteration	2008-12-25 17:21:17 -08:00
pcmcia	…
rdma	…
rxrpc	…
scsi	[SCSI] fc_transport: fix old bug on bitflag definitions	2008-11-21 17:30:53 +09:00
sound	Merge branches 'topic/fix/misc' and 'topic/fix/hda' into for-linus	2008-11-10 17:58:46 +01:00
trace	…
video	Revert "radeonfb: accelerate imageblit and other improvements"	2008-12-10 16:53:32 -08:00
xen	…
Kbuild	…