linux-sg2042/drivers/net
Dan Carpenter a28d0e873d wan/x25_asy: integer overflow in x25_asy_change_mtu()
If "newmtu * 2 + 4" is too large then it can cause an integer overflow
leading to memory corruption.  Eric Dumazet suggests that 65534 is a
reasonable upper limit.

Btw, "newmtu" is not allowed to be a negative number because of the
check in dev_set_mtu(), so that's ok.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2014-07-17 16:47:50 -07:00
..
appletalk
arcnet
bonding bonding: fix ad_select module param check 2014-07-14 14:36:58 -07:00
caif
can
cris
dsa
ethernet net/mlx4_en: cq->irq_desc wasn't set in legacy EQ's 2014-07-16 23:28:32 -07:00
fddi defxx: Fix !DYNAMIC_BUFFERS compilation warnings 2014-07-02 18:26:29 -07:00
hamradio
hippi
hyperv
ieee802154
irda
phy dp83640: Always decode received status frames 2014-07-09 17:00:34 -07:00
plip
ppp net: ppp: fix creating PPP pass and active filters 2014-07-16 23:42:06 -07:00
slip
team
usb hso: fix deadlock when receiving bursts of data 2014-07-14 19:27:34 -07:00
vmxnet3
wan wan/x25_asy: integer overflow in x25_asy_change_mtu() 2014-07-17 16:47:50 -07:00
wimax
wireless rt2800usb: Don't perform DMA from stack 2014-07-07 15:04:34 -04:00
xen-netback xen-netback: bookkeep number of active queues in our own module 2014-06-25 15:59:47 -07:00
Kconfig
LICENSE.SRC
Makefile
Space.c
dummy.c
eql.c
ifb.c
loopback.c
macvlan.c
macvtap.c
mdio.c
mii.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
sungem_phy.c
tun.c
veth.c
virtio_net.c
vxlan.c
xen-netfront.c xen-netfront: call netif_carrier_off() only once when disconnecting 2014-07-08 11:21:03 -07:00