Jozsef Kadlecsik d8aacd8718 netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length ... Julia Lawall pointed out that IPSET_ATTR_ETHER netlink attribute length was not checked explicitly, just for the maximum possible size. Malicious netlink clients could send shorter attribute and thus resulting a kernel read after the buffer. The patch adds the explicit length checkings. Reported-by: Julia Lawall <julia.lawall@lip6.fr> Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>		2016-03-08 20:36:17 +01:00
..
Kconfig	netfilter: ipset: hash:mac type added to ipset	2014-09-15 22:20:21 +02:00
Makefile	netfilter: ipset: hash:mac type added to ipset	2014-09-15 22:20:21 +02:00
ip_set_bitmap_gen.h	netfilter: ipset: Fix extension alignment	2015-11-07 11:21:47 +01:00
ip_set_bitmap_ip.c	netfilter: ipset: Fix extension alignment	2015-11-07 11:21:47 +01:00
ip_set_bitmap_ipmac.c	netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length	2016-03-08 20:36:17 +01:00
ip_set_bitmap_port.c	netfilter: ipset: Fix extension alignment	2015-11-07 11:21:47 +01:00
ip_set_core.c	netfilter: ipset: Fix set:list type crash when flush/dump set in parallel	2016-02-24 20:32:21 +01:00
ip_set_getport.c	netfilter: ipset: Fix coding styles reported by checkpatch.pl	2015-06-14 10:40:18 +02:00
ip_set_hash_gen.h	netfilter: ipset: Fix hash type expire: release empty hash bucket block	2015-11-07 11:28:49 +01:00
ip_set_hash_ip.c	netfilter: ipset: Fix coding styles reported by checkpatch.pl	2015-06-14 10:40:18 +02:00
ip_set_hash_ipmark.c	netfilter: ipset: Fix coding styles reported by checkpatch.pl	2015-06-14 10:40:18 +02:00
ip_set_hash_ipport.c	netfilter: ipset: Fix coding styles reported by checkpatch.pl	2015-06-14 10:40:18 +02:00
ip_set_hash_ipportip.c	netfilter: ipset: Fix coding styles reported by checkpatch.pl	2015-06-14 10:40:18 +02:00
ip_set_hash_ipportnet.c	netfilter: ipset: Fix coding styles reported by checkpatch.pl	2015-06-14 10:40:18 +02:00
ip_set_hash_mac.c	netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length	2016-03-08 20:36:17 +01:00
ip_set_hash_net.c	netfilter: ipset: Fix coding styles reported by checkpatch.pl	2015-06-14 10:40:18 +02:00
ip_set_hash_netiface.c	netfilter: ipset: allow a 0 netmask with hash_netiface type	2016-01-13 14:03:43 +01:00
ip_set_hash_netnet.c	netfilter: ipset: Fixing unnamed union init	2015-08-29 01:02:28 +02:00
ip_set_hash_netport.c	netfilter: ipset: Fix coding styles reported by checkpatch.pl	2015-06-14 10:40:18 +02:00
ip_set_hash_netportnet.c	netfilter: ipset: Fixing unnamed union init	2015-08-29 01:02:28 +02:00
ip_set_list_set.c	netfilter: ipset: Fix set:list type crash when flush/dump set in parallel	2016-02-24 20:32:21 +01:00
pfxlen.c	netfilter: ipset: Fix coding styles reported by checkpatch.pl	2015-06-14 10:40:18 +02:00