linux/net
Patrick McHardy f9f02cca25 [NETFILTER]: nf_conntrack_ipv6: fix crash when handling fragments
When IPv6 connection tracking splits up a defragmented packet into
its original fragments, the packets are taken from a list and are
passed to the network stack with skb->next still set. This causes
dev_hard_start_xmit to treat them as GSO fragments, resulting in
a use after free when connection tracking handles the next fragment.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-01-09 14:32:41 -08:00
..
802
8021q
appletalk [PATCH] severing skbuff.h -> highmem.h 2006-12-04 02:00:29 -05:00
atm [PATCH] struct path: convert atm 2006-12-08 08:28:44 -08:00
ax25 [AX.25]: Fix unchecked ax25_linkfail_register uses 2006-12-17 21:59:11 -08:00
bluetooth [Bluetooth] Handle device registration failures 2007-01-09 00:29:56 -08:00
bridge [NETFILTER]: ebtables: don't compute gap before checking struct type 2007-01-04 12:17:44 -08:00
core [PKTGEN]: Convert to kthread API. 2007-01-03 18:38:09 -08:00
dccp [DCCP] ccid3: return value in ccid3_hc_rx_calc_first_li 2006-12-13 16:48:24 -08:00
decnet [PATCH] sysctl: remove unused "context" param 2006-12-10 09:55:41 -08:00
econet
ethernet
ieee80211 [PATCH] ieee80211softmac: Fix mutex_lock at exit of ieee80211_softmac_get_genie 2006-12-19 16:19:45 -05:00
ipv4 [TCP]: Fix iov_len calculation in tcp_v4_send_ack(). 2007-01-09 00:30:08 -08:00
ipv6 [NETFILTER]: nf_conntrack_ipv6: fix crash when handling fragments 2007-01-09 14:32:41 -08:00
ipx
irda [PATCH] tty: switch to ktermios and new framework 2006-12-08 08:28:56 -08:00
key audit: Add auditing to ipsec 2006-12-06 20:14:22 -08:00
lapb
llc
netfilter [NETFILTER]: nf_conntrack_netbios_ns: fix uninitialized member in expectation 2007-01-09 00:30:07 -08:00
netlabel NetLabel: correct CIPSO tag handling when adding new DOI definitions 2007-01-09 00:30:01 -08:00
netlink [AF_NETLINK]: module_put cleanup 2007-01-03 18:38:15 -08:00
netrom [AX.25]: Fix unchecked ax25_linkfail_register uses 2006-12-17 21:59:11 -08:00
packet [NET]: Memory barrier cleanups 2006-12-07 00:11:33 -08:00
rose [AX.25]: Fix unchecked rose_add_loopback_neigh uses 2006-12-17 21:59:14 -08:00
rxrpc [PATCH] Add include/linux/freezer.h and move definitions from sched.h 2006-12-07 08:39:27 -08:00
sched [NET_SCHED] sch_htb: turn intermediate classes into leaves 2006-12-08 17:19:32 -08:00
sctp [SCTP]: make 2 functions static 2006-12-22 11:12:05 -08:00
sunrpc [PATCH] gss_spkm3: fix error handling in module init 2006-12-22 08:55:49 -08:00
tipc [PATCH] getting rid of all casts of k[cmz]alloc() calls 2006-12-13 09:05:58 -08:00
unix [PATCH] struct path: convert unix 2006-12-08 08:28:50 -08:00
wanrouter [WANROUTER]: Kill kmalloc debugging code. 2006-12-07 00:18:22 -08:00
x25 [X25]: Trivial, SOCK_DEBUG's in x25_facilities missing newlines 2007-01-09 00:29:52 -08:00
xfrm [XFRM_USER]: avoid pointless void ** casts 2007-01-03 18:38:13 -08:00
compat.c
Kconfig [NETFILTER]: remove the reference to ipchains from Kconfig 2006-12-02 21:31:35 -08:00
Makefile
nonet.c
socket.c [PATCH] struct path: convert net 2006-12-08 08:28:48 -08:00
sysctl_net.c
TUNABLE