Herbert XuandGreg Kroah-Hartman 0afa5f0736 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames ...

commit cb3e9864cd upstream.

The total cork length created by ip6_append_data includes extension
headers, so we must exclude them when comparing them against the
IPV6_CHECKSUM offset which does not include extension headers.

Reported-by: Kyle Zeng <zengyhkyle@gmail.com>
Fixes: 357b40a18b ("[IPV6]: IPV6_CHECKSUM socket option can corrupt kernel memory")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-01-18 11:58:19 +01:00

..

ila

genetlink: start to validate reserved header bytes

2022-08-29 12:47:15 +01:00

netfilter

netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.

2022-10-19 08:46:48 +02:00

addrconf_core.c

net: rename reference+tracking helpers

2022-06-09 21:52:55 -07:00

addrconf.c

Merge tag 'net-6.1-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2022-10-20 17:24:59 -07:00

addrlabel.c

ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network

2022-11-07 12:26:15 +00:00

af_inet6.c

net: Return errno in sk->sk_prot->get_port().

2022-12-31 13:32:13 +01:00

ah6.c

xfrm: ah: add extack to ah_init_state, ah6_init_state

2022-09-29 07:17:59 +02:00

anycast.c

…

calipso.c

…

datagram.c

net: setsockopt: fix IPV6_UNICAST_IF option for connected sockets

2022-12-31 13:32:27 +01:00

esp6_offload.c

xfrm: replay: Fix ESN wrap around for GSO

2022-10-19 09:00:53 +02:00

esp6.c

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next

2022-10-03 07:52:13 +01:00

exthdrs_core.c

…

exthdrs_offload.c

…

exthdrs.c

…

fib6_notifier.c

…

fib6_rules.c

…

fou6.c

…

icmp.c

icmp: Fix data-races around sysctl_icmp_echo_enable_probe.

2022-07-13 12:56:49 +01:00

inet6_connection_sock.c

…

inet6_hashtables.c

tcp: Access &tcp_hashinfo via net.

2022-09-20 10:21:49 -07:00

ioam6_iptunnel.c

…

ioam6.c

genetlink: start to validate reserved header bytes

2022-08-29 12:47:15 +01:00

ip6_checksum.c

…

ip6_fib.c

…

ip6_flowlabel.c

treewide: use get_random_u32() when possible

2022-10-11 17:42:58 -06:00

ip6_gre.c

ipv6: ensure sane device mtu in tunnels

2022-10-25 16:04:22 -07:00

ip6_icmp.c

…

ip6_input.c

tcp/udp: Make early_demux back namespacified.

2022-07-15 18:50:35 -07:00

ip6_offload.c

net-next: skbuff: refactor pskb_pull

2022-09-30 12:31:46 +01:00

ip6_offload.h

…

ip6_output.c

ipv6: avoid use-after-free in ip6_fragment()

2022-12-07 20:14:35 -08:00

ip6_tunnel.c

ipv6: ensure sane device mtu in tunnels

2022-10-25 16:04:22 -07:00

ip6_udp_tunnel.c

…

ip6_vti.c

ip6_vti:Remove the space before the comma

2022-09-30 13:10:44 +01:00

ip6mr.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2022-09-22 13:02:10 -07:00

ipcomp6.c

xfrm: ipcomp: add extack to ipcomp{4,6}_init_state

2022-09-29 07:18:00 +02:00

ipv6_sockglue.c

tcp: Fix data races around icsk->icsk_af_ops.

2022-10-12 17:50:37 -07:00

Kconfig

crypto: lib - make the sha1 library optional

2022-07-15 16:43:59 +08:00

Makefile

…

mcast_snoop.c

…

mcast.c

treewide: use prandom_u32_max() when possible, part 1

2022-10-11 17:42:55 -06:00

mip6.c

xfrm: mip6: add extack to mip6_destopt_init_state, mip6_rthdr_init_state

2022-09-29 07:18:01 +02:00

ndisc.c

net: fix potential refcount leak in ndisc_router_discovery()

2022-08-15 11:40:28 +01:00

netfilter.c

…

output_core.c

treewide: use get_random_u32() when possible

2022-10-11 17:42:58 -06:00

ping.c

inet: ping: fix recent breakage

2022-10-12 09:10:02 +01:00

proc.c

…

protocol.c

…

raw.c

ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

2023-01-18 11:58:19 +01:00

reassembly.c

…

route.c

ipv6: fix WARNING in ip6_route_net_exit_late()

2022-11-02 20:47:14 -07:00

rpl_iptunnel.c

…

rpl.c

…

seg6_hmac.c

net: ipv6: unexport __init-annotated seg6_hmac_net_init()

2022-06-28 21:23:30 -07:00

seg6_iptunnel.c

seg6: add support for SRv6 H.L2Encaps.Red behavior

2022-07-29 12:14:03 +01:00

seg6_local.c

seg6: add NEXT-C-SID support for SRv6 End behavior

2022-09-20 12:33:22 +02:00

seg6.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2022-09-08 18:38:30 +02:00

sit.c

ipv6/sit: use DEV_STATS_INC() to avoid data-races

2022-12-31 13:33:02 +01:00

syncookies.c

tcp: Fix data-races around sysctl_tcp_syncookies.

2022-07-18 12:21:54 +01:00

sysctl_net_ipv6.c

…

tcp_ipv6.c

dccp/tcp: Fixup bhash2 bucket when connect() fails.

2022-11-22 20:15:37 -08:00

tcpv6_offload.c

…

tunnel6.c

…

udp_impl.h

tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().

2022-10-12 17:50:37 -07:00

udp_offload.c

…

udp.c

udp: Clean up some functions.

2022-12-31 13:32:13 +01:00

udplite.c

tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().

2022-10-12 17:50:37 -07:00

xfrm6_input.c

…

xfrm6_output.c

…

xfrm6_policy.c

xfrm: Fix ignored return value in xfrm6_init()

2022-11-22 07:16:34 +01:00

xfrm6_protocol.c

…

xfrm6_state.c

…

xfrm6_tunnel.c

xfrm: tunnel: add extack to ipip_init_state, xfrm6_tunnel_init_state

2022-09-29 07:18:00 +02:00