Jason Wang cc9b17ad29 net: sock: validate data_len before allocating skb in sock_alloc_send_pskb() ...

We need to validate the number of pages consumed by data_len, otherwise frags
array could be overflowed by userspace. So this patch validate data_len and
return -EMSGSIZE when data_len may occupies more frags than MAX_SKB_FRAGS.

Signed-off-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2012-05-31 18:22:45 -04:00

..

datagram.c

…

dev_addr_lists.c

…

dev.c

net: napi_frags_skb() is static

2012-05-19 02:51:00 -04:00

drop_monitor.c

drop_monitor: Add module alias to enable automatic module loading

2012-05-29 22:33:56 -04:00

dst.c

…

ethtool.c

ethtool: Extend the ethtool API to obtain plugin module eeprom data

2012-05-10 02:22:17 +01:00

fib_rules.c

…

filter.c

Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2012-05-21 20:27:36 -07:00

flow_dissector.c

…

flow.c

…

gen_estimator.c

…

gen_stats.c

…

iovec.c

…

link_watch.c

…

Makefile

…

neighbour.c

net: core: Use pr_<level>

2012-05-17 05:00:04 -04:00

net_namespace.c

net: core: Use pr_<level>

2012-05-17 05:00:04 -04:00

net-sysfs.c

…

net-sysfs.h

…

net-traces.c

…

netevent.c

…

netpoll.c

…

netprio_cgroup.c

Merge branch 'for-3.5' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup

2012-05-22 17:40:19 -07:00

pktgen.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2012-05-20 21:53:04 -04:00

request_sock.c

…

rtnetlink.c

net: Convert net_ratelimit uses to net_<level>_ratelimited

2012-05-15 13:45:03 -04:00

scm.c

…

secure_seq.c

…

skbuff.c

net: introduce skb_try_coalesce()

2012-05-19 18:34:57 -04:00

sock_diag.c

net: sock_diag_handler structs can be const

2012-04-25 20:46:59 -04:00

sock.c

net: sock: validate data_len before allocating skb in sock_alloc_send_pskb()

2012-05-31 18:22:45 -04:00

stream.c

…

sysctl_net_core.c

…

timestamping.c

…

user_dma.c

…

utils.c

…