Jeremy Sowden 9358d6076e netfilter: ip6_tables: zero-initialize fragment offset ...

[ Upstream commit 310e2d43c3ad429c1fba4b175806cf1f55ed73a6 ]

ip6tables only sets the `IP6T_F_PROTO` flag on a rule if a protocol is
specified (`-p tcp`, for example).  However, if the flag is not set,
`ip6_packet_match` doesn't call `ipv6_find_hdr` for the skb, in which
case the fragment offset is left uninitialized and a garbage value is
passed to each matcher.

Signed-off-by: Jeremy Sowden <jeremy@azazel.net>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2021-10-17 10:04:44 +02:00

..

netfilter

netfilter: ip6_tables: zero-initialize fragment offset

2021-10-17 10:04:44 +02:00

addrconf_core.c

net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup

2020-05-20 08:11:37 +02:00

addrconf.c

ipv6: create multicast route with RTPROT_KERNEL

2021-01-30 13:25:57 +01:00

addrlabel.c

ipv6/addrlabel: fix ip6addrlbl_get()

2015-12-22 15:57:54 -05:00

af_inet6.c

net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup

2020-05-20 08:11:37 +02:00

ah6.c

ah6: fix error return code in ah6_input()

2020-11-24 12:48:09 +01:00

anycast.c

ipv6: fix memory leaks on IPV6_ADDRFORM path

2020-08-21 10:52:56 +02:00

datagram.c

l2tp: lock socket before checking flags in connect()

2020-05-27 16:40:28 +02:00

esp6.c

esp6: fix memleak on error path in esp6_input

2020-06-11 09:21:37 +02:00

exthdrs_core.c

ipv6: re-enable fragment header matching in ipv6_find_hdr

2016-04-20 15:41:59 +09:00

exthdrs_offload.c

ipv6: fix exthdrs offload registration in out_rt path

2015-09-02 15:31:00 -07:00

exthdrs.c

ipv6: add complete rcu protection around np->opt

2015-12-02 23:37:16 -05:00

fib6_rules.c

ipv6: Do not leak throw route references

2017-07-05 14:37:14 +02:00

icmp.c

net: handle no dst on skb in icmp6_send

2020-05-20 08:11:41 +02:00

ila.c

dst: Pass net into dst->output

2015-10-08 04:27:03 -07:00

inet6_connection_sock.c

net: ipv6: add net argument to ip6_dst_lookup_flow

2020-05-20 08:11:36 +02:00

inet6_hashtables.c

net: SO_INCOMING_CPU setsockopt() support

2015-10-12 19:28:20 -07:00

ip6_checksum.c

ipv6: fix checksum annotation in udp6_csum_init

2020-05-10 10:26:16 +02:00

ip6_fib.c

ipv6: Fix route replacement with dev-only route

2020-03-11 07:51:13 +01:00

ip6_flowlabel.c

ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero

2019-06-22 08:18:25 +02:00

ip6_gre.c

ipv6: remove extra dev_hold() for fallback tunnels

2021-05-22 10:38:30 +02:00

ip6_icmp.c

…

ip6_input.c

ipv6: weaken the v4mapped source check

2021-04-07 12:04:20 +02:00

ip6_offload.c

gso_segment: Reset skb->mac_len after modifying network header

2018-09-29 03:08:52 -07:00

ip6_offload.h

…

ip6_output.c

net: ipv6: add net argument to ip6_dst_lookup_flow

2020-05-20 08:11:36 +02:00

ip6_tunnel.c

ipv6: remove extra dev_hold() for fallback tunnels

2021-05-22 10:38:30 +02:00

ip6_udp_tunnel.c

ipv6: explicitly initialize udp6_addr in udp_sock_create6()

2019-01-13 10:05:27 +01:00

ip6_vti.c

ipv6: remove extra dev_hold() for fallback tunnels

2021-05-22 10:38:30 +02:00

ip6mr.c

ipv6: do not abuse GFP_ATOMIC in inet6_netconf_notify_devconf()

2020-05-10 10:26:16 +02:00

ipcomp6.c

…

ipv6_sockglue.c

ipv6: fix memory leaks on IPV6_ADDRFORM path

2020-08-21 10:52:56 +02:00

Kconfig

ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV

2018-08-15 17:42:05 +02:00

Makefile

net: Identifier Locator Addressing module

2015-08-17 21:33:06 -07:00

mcast_snoop.c

net: fix wrong skb_get() usage / crash in IGMP/MLD parsing code

2015-08-13 17:08:39 -07:00

mcast.c

mld: fix panic in mld_newpack()

2021-06-03 08:22:08 +02:00

mip6.c

ipv6: use ktime_t for internal timestamps

2015-10-05 03:16:47 -07:00

ndisc.c

ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called

2018-11-10 07:41:41 -08:00

netfilter.c

ipv6: Pass struct net into ip6_route_me_harder

2015-09-29 20:21:32 +02:00

output_core.c

ipv6: use prandom_u32() for ID generation

2021-07-20 16:22:37 +02:00

ping.c

ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()'

2019-09-21 07:12:38 +02:00

proc.c

inet: frags: break the 2GB limit for frags storage

2019-02-08 11:25:31 +01:00

protocol.c

net: Export inet_offloads and inet6_offloads

2014-09-19 17:15:31 -04:00

raw.c

net: ipv6: add net argument to ip6_dst_lookup_flow

2020-05-20 08:11:36 +02:00

reassembly.c

inet: frags: call inet_frags_fini() after unregister_pernet_subsys()

2020-01-29 10:21:44 +01:00

route.c

net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh

2021-04-16 12:00:20 +02:00

sit.c

ipv6: remove extra dev_hold() for fallback tunnels

2021-05-22 10:38:30 +02:00

syncookies.c

net: Update window_clamp if SOCK_RCVBUF is set

2020-11-18 18:25:02 +01:00

sysctl_net_ipv6.c

ipv6: Implement different admin modes for automatic flow labels

2015-07-31 17:07:11 -07:00

tcp_ipv6.c

ipv6: tcp: drop silly ICMPv6 packet too big messages

2021-07-28 09:12:34 +02:00

tcpv6_offload.c

tcp: cleanup static functions

2015-02-28 16:56:51 -05:00

tunnel6.c

ipv6: fix tunnel error handling

2015-11-03 10:52:13 -05:00

udp_impl.h

udplite: call proper backlog handlers

2019-03-23 08:44:29 +01:00

udp_offload.c

net: avoid skb_warn_bad_offload false positives on UFO

2017-08-12 19:29:08 -07:00

udp.c

udp: drop corrupt packets earlier to avoid data corruption

2020-08-21 10:52:57 +02:00

udplite.c

udplite: call proper backlog handlers

2019-03-23 08:44:29 +01:00

xfrm6_input.c

vti6: fix input path

2020-05-10 10:26:23 +02:00

xfrm6_mode_beet.c

xfrm: simplify xfrm_address_t use

2015-03-31 13:58:35 -04:00

xfrm6_mode_ro.c

ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()

2017-06-14 13:16:19 +02:00

xfrm6_mode_transport.c

ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()

2017-06-14 13:16:19 +02:00

xfrm6_mode_tunnel.c

ipv6: update skb->csum when CE mark is propagated

2016-01-31 11:29:01 -08:00

xfrm6_output.c

net: ipv6: fix return value of ip6_skb_dst_mtu

2021-07-28 09:12:34 +02:00

xfrm6_policy.c

xfrm6: avoid potential infinite loop in _decode_session6()

2018-07-03 11:21:24 +02:00

xfrm6_protocol.c

…

xfrm6_state.c

…

xfrm6_tunnel.c

vti6: fix input path

2020-05-10 10:26:23 +02:00