Evolution-X-Devices/kernel_google_msm-4.9
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
c677e7adea5b7457f64042cab2290d055eee42e9
kernel_google_msm-4.9/drivers/net
History
Cong Wang 227f0246c7 bonding: validate ip header before check IPPROTO_IGMP 
[ Upstream commit 9d1bc24b52fb8c5d859f9a47084bf1179470e04c ]

bond_xmit_roundrobin() checks for IGMP packets but it parses
the IP header even before checking skb->protocol.

We should validate the IP header with pskb_may_pull() before
using iph->protocol.

Reported-and-tested-by: syzbot+e5be16aa39ad6e755391@syzkaller.appspotmail.com
Fixes: a2fd940f4c ("bonding: fix broken multicast with round-robin mode")
Cc: Jay Vosburgh <j.vosburgh@gmail.com>
Cc: Veaceslav Falico <vfalico@gmail.com>
Cc: Andy Gospodarek <andy@greyhouse.net>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-08-04 09:33:35 +02:00
..
appletalk
net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT
2018-09-29 03:07:32 -07:00
arcnet
…
bonding
bonding: validate ip header before check IPPROTO_IGMP
2019-08-04 09:33:35 +02:00
caif
caif-hsi: fix possible deadlock in cfhsi_exit_module()
2019-08-04 09:33:33 +02:00
can
can: mcp251x: add support for mcp25625
2019-07-21 09:05:54 +02:00
cris
…
dsa
net: dsa: mv88e6xxx: wait after reset deactivation
2019-08-04 09:33:33 +02:00
ethernet
sky2: Disable MSI on ASUS P6T
2019-08-04 09:33:34 +02:00
fddi
…
fjes
fjes: Fix wrong netdevice feature flags
2017-12-20 10:07:22 +01:00
hamradio
net: hamradio: use eth_broadcast_addr
2018-08-24 13:12:30 +02:00
hippi
hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
2018-02-25 11:05:50 +01:00
hyperv
hv_netvsc: Fix IP header checksum for coalesced packets
2019-03-13 14:04:53 -07:00
ieee802154
ieee802154: fakelb: switch from BUG_ON() to WARN_ON() on problem
2018-08-24 13:12:37 +02:00
ipvlan
ipvlan: disallow userns cap_net_admin to change global mode/flags
2019-03-19 13:14:10 +01:00
irda
irda: vlsi_ir: fix check for DMA mapping errors
2017-12-25 14:23:41 +01:00
phy
net: phy: Check against net_device being NULL
2019-08-04 09:33:17 +02:00
plip
…
ppp
ppp: mppe: Add softdep to arc4
2019-07-21 09:06:06 +02:00
slip
slip: make slhc_free() silently accept an error pointer
2019-05-02 09:32:03 +02:00
team
team: Always enable vlan tx offload
2019-07-10 09:55:41 +02:00
usb
net: usb: asix: init MAC address buffers
2019-08-04 09:33:24 +02:00
vmxnet3
vmxnet3: use DMA memory barriers where required
2018-05-25 16:12:56 +02:00
wan
net/wan: fix a double free in x25_asy_open_tty()
2019-01-09 16:16:40 +01:00
wimax
net: wimax/i2400m: fix NULL-deref at probe
2017-12-20 10:07:20 +01:00
wireless
iwlwifi: pcie: don't service an interrupt that was masked
2019-08-04 09:33:26 +02:00
xen-netback
xen-netback: fix occasional leak of grant ref mappings under memory pressure
2019-03-13 14:04:53 -07:00
dummy.c
…
eql.c
…
geneve.c
geneve: add missing rx stats accounting
2018-04-13 19:48:26 +02:00
gtp.c
gtp: fix use-after-free in gtp_newlink()
2019-08-04 09:33:25 +02:00
ifb.c
…
Kconfig
vmxnet3: prevent building with 64K pages
2018-02-25 11:05:51 +01:00
LICENSE.SRC
…
loopback.c
net: introduce device min_header_len
2017-02-18 15:11:43 +01:00
macsec.c
macsec: fix checksumming after decryption
2019-08-04 09:33:34 +02:00
macvlan.c
macvlan: fix use-after-free in macvlan_common_newlink()
2018-05-30 07:50:30 +02:00
macvtap.c
tap: double-free in error path in tap_open()
2017-11-18 11:22:22 +01:00
Makefile
…
mdio.c
…
mii.c
…
netconsole.c
…
nlmon.c
…
ntb_netdev.c
…
rionet.c
rapidio/rionet: do not free skb before reading its length
2018-12-05 19:42:38 +01:00
sb1000.c
…
Space.c
…
sungem_phy.c
…
tun.c
tun: wake up waitqueues after IFF_UP is set
2019-07-10 09:55:41 +02:00
veth.c
veth: set peer GSO values
2018-03-22 09:17:57 +01:00
virtio_net.c
virtio-net: Fix operstate for virtio when no VIRTIO_NET_F_STATUS
2018-05-30 07:50:44 +02:00
vrf.c
vrf: make sure skb->data contains ip header to make routing
2019-08-04 09:33:34 +02:00
vxlan.c
vxlan: Don't call gro_cells_destroy() before device is unregistered
2019-04-03 06:24:15 +02:00
xen-netfront.c
xen/netfront: tolerate frags with no data
2019-01-09 16:16:41 +01:00