Eric Dumazet b1785e844a ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy ...

[ Upstream commit aa8f877849 ]

KMSAN reported use of uninit-value that I tracked to lack
of proper size check on RTA_TABLE attribute.

I also believe RTA_PREFSRC lacks a similar check.

Fixes: 86872cb579 ("[IPv6] route: FIB6 configuration using struct fib6_config")
Fixes: c3968a857a ("ipv6: RTA_PREFSRC support for ipv6 route source address selection")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: syzbot <syzkaller@googlegroups.com>
Acked-by: David Ahern <dsahern@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-04-29 07:50:06 +02:00

..

netfilter

netfilter: x_tables: pack percpu counter allocations

2018-03-18 11:17:52 +01:00

addrconf_core.c

…

addrconf.c

ipv6: avoid dad-failures for addresses with NODAD

2018-04-13 19:50:06 +02:00

addrlabel.c

ipv6/addrlabel: fix ip6addrlbl_get()

2015-12-22 15:57:54 -05:00

af_inet6.c

net: reevalulate autoflowlabel setting after sysctl setting

2018-01-02 20:33:25 +01:00

ah6.c

ipsec: check return value of skb_to_sgvec always

2018-04-13 19:50:23 +02:00

anycast.c

…

datagram.c

ipv6: Handle IPv4-mapped src to in6addr_any dst.

2017-06-17 06:39:35 +02:00

esp6.c

ipsec: check return value of skb_to_sgvec always

2018-04-13 19:50:23 +02:00

exthdrs_core.c

ipv6: re-enable fragment header matching in ipv6_find_hdr

2016-04-20 15:41:59 +09:00

exthdrs_offload.c

…

exthdrs.c

ipv6: add complete rcu protection around np->opt

2015-12-02 23:37:16 -05:00

fib6_rules.c

ipv6: Do not leak throw route references

2017-07-05 14:37:14 +02:00

icmp.c

ipv6: kill sk_dst_lock

2015-12-03 11:32:06 -05:00

ila.c

dst: Pass net into dst->output

2015-10-08 04:27:03 -07:00

inet6_connection_sock.c

ipv6: kill sk_dst_lock

2015-12-03 11:32:06 -05:00

inet6_hashtables.c

net: SO_INCOMING_CPU setsockopt() support

2015-10-12 19:28:20 -07:00

ip6_checksum.c

udplite: fix partial checksum initialization

2018-03-11 16:19:46 +01:00

ip6_fib.c

ipv6: fix typo in fib6_net_exit()

2017-09-27 11:00:12 +02:00

ip6_flowlabel.c

ipv6: flowlabel: do not leave opt->tot_len with garbage

2017-11-18 11:11:06 +01:00

ip6_gre.c

ip6_gre: better validate user provided tunnel names

2018-04-13 19:50:26 +02:00

ip6_icmp.c

…

ip6_input.c

…

ip6_offload.c

ipv6: Fix leak in ipv6_gso_segment().

2017-06-14 13:16:19 +02:00

ip6_offload.h

…

ip6_output.c

ipv6: the entire IPv6 header chain must fit the first fragment

2018-04-13 19:50:27 +02:00

ip6_tunnel.c

ip6_tunnel: better validate user provided tunnel names

2018-04-13 19:50:27 +02:00

ip6_udp_tunnel.c

…

ip6_vti.c

vti6: better validate user provided tunnel names

2018-04-13 19:50:27 +02:00

ip6mr.c

ip6mr: fix stale iterator

2018-02-16 20:09:37 +01:00

ipcomp6.c

…

ipv6_sockglue.c

netfilter: drop outermost socket lock in getsockopt()

2018-02-28 10:17:21 +01:00

Kconfig

net: replace dst_cache ip6_tunnel implementation with the generic one

2018-02-25 11:03:34 +01:00

Makefile

…

mcast_snoop.c

…

mcast.c

ipv6: mcast: better catch silly mtu values

2018-01-02 20:33:24 +01:00

mip6.c

ipv6: use ktime_t for internal timestamps

2015-10-05 03:16:47 -07:00

ndisc.c

ipv6: fix access to non-linear packet in ndisc_fill_redirect_hdr_option()

2018-03-31 18:12:33 +02:00

netfilter.c

…

output_core.c

ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()

2017-09-27 11:00:10 +02:00

ping.c

net: ping: do not abuse udp_poll()

2017-06-14 13:16:19 +02:00

proc.c

…

protocol.c

…

raw.c

net: ping: do not abuse udp_poll()

2017-06-14 13:16:19 +02:00

reassembly.c

Revert "net: fix percpu memory leaks"

2017-09-27 11:00:11 +02:00

route.c

ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy

2018-04-29 07:50:06 +02:00

sit.c

ipv6: sit: better validate user provided tunnel names

2018-04-13 19:50:26 +02:00

syncookies.c

ipv4: ipv6: initialize treq->txhash in cookie_v[46]_check()

2017-08-11 09:08:51 -07:00

sysctl_net_ipv6.c

…

tcp_ipv6.c

tcp md5sig: Use skb's saddr when replying to an incoming segment

2018-01-02 20:33:25 +01:00

tcpv6_offload.c

…

tunnel6.c

ipv6: fix tunnel error handling

2015-11-03 10:52:13 -05:00

udp_impl.h

…

udp_offload.c

net: avoid skb_warn_bad_offload false positives on UFO

2017-08-12 19:29:08 -07:00

udp.c

udpv6: Fix the checksum computation when HW checksum does not apply

2017-10-21 17:09:02 +02:00

udplite.c

…

xfrm6_input.c

…

xfrm6_mode_beet.c

…

xfrm6_mode_ro.c

ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()

2017-06-14 13:16:19 +02:00

xfrm6_mode_transport.c

ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()

2017-06-14 13:16:19 +02:00

xfrm6_mode_tunnel.c

ipv6: update skb->csum when CE mark is propagated

2016-01-31 11:29:01 -08:00

xfrm6_output.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-10-24 06:54:12 -07:00

xfrm6_policy.c

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec

2015-12-22 16:26:31 -05:00

xfrm6_protocol.c

…

xfrm6_state.c

…

xfrm6_tunnel.c

…