Tom Herbert 1eed4dfb81 flow_dissector: Add limit for number of headers to dissect ... In flow dissector there are no limits to the number of nested encapsulations or headers that might be dissected which makes for a nice DOS attack. This patch sets a limit of the number of headers that flow dissector will parse. Headers includes network layer headers, transport layer headers, shim headers for encapsulation, IPv6 extension headers, etc. The limit for maximum number of headers to parse has be set to fifteen to account for a reasonable number of encapsulations, extension headers, VLAN, in a packet. Note that this limit does not supercede the STOP_AT_* flags which may stop processing before the headers limit is reached. Reported-by: Hannes Frederic Sowa <hannes@stressinduktion.org> Signed-off-by: Tom Herbert <tom@quantonium.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2017-09-05 11:40:08 -07:00
..
datagram.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-09-01 17:42:05 -07:00
dev_addr_lists.c
dev_ioctl.c	net: check dev->addr_len for dev_set_mac_address()	2017-07-29 11:25:05 -07:00
dev.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-09-01 17:42:05 -07:00
devlink.c	devlink: Add IPv6 header for dpipe	2017-08-31 14:42:19 -07:00
drop_monitor.c	drop_monitor: use setup_timer	2017-03-12 23:47:16 -07:00
dst_cache.c
dst.c	net: check type when freeing metadata dst	2017-08-21 10:57:38 -07:00
ethtool.c	net: ethtool: add support for forward error correction modes	2017-07-29 23:23:44 -07:00
fib_notifier.c	net: Add module reference to FIB notifiers	2017-09-01 20:33:42 -07:00
fib_rules.c	rtnetlink: make rtnl_register accept a flags parameter	2017-08-09 16:57:38 -07:00
filter.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-09-01 17:42:05 -07:00
flow_dissector.c	flow_dissector: Add limit for number of headers to dissect	2017-09-05 11:40:08 -07:00
gen_estimator.c
gen_stats.c
gro_cells.c	net: Generic XDP	2017-04-25 13:33:49 -04:00
hwbm.c
link_watch.c
lwt_bpf.c	net: add extack arg to lwtunnel build state	2017-05-30 11:55:32 -04:00
lwtunnel.c	ipv6: sr: define core operations for seg6local lightweight tunnel	2017-08-07 14:16:22 -07:00
Makefile	net: core: Make the FIB notification chain generic	2017-08-03 15:35:59 -07:00
neighbour.c	rtnetlink: make rtnl_register accept a flags parameter	2017-08-09 16:57:38 -07:00
net_namespace.c	net: call newid/getid without rtnl mutex held	2017-08-09 16:57:38 -07:00
net-procfs.c	net-procfs: Use vsnprintf extension %phN	2017-06-04 19:52:58 -04:00
net-sysfs.c	net: style cleanups	2017-08-18 22:38:47 -07:00
net-sysfs.h
net-traces.c	bridge: add tracepoint in br_fdb_update	2017-08-31 11:42:41 -07:00
netclassid_cgroup.c	cgroup, net_cls: iterate the fds of only the tasks which are being migrated	2017-03-22 10:32:46 -07:00
netevent.c
netpoll.c	netpoll: Fix device name check in netpoll_setup()	2017-07-26 17:01:43 -07:00
netprio_cgroup.c	net: break include loop netdevice.h, dsa.h, devlink.h	2017-03-28 22:46:04 -07:00
pktgen.c	net: convert sk_buff.users from atomic_t to refcount_t	2017-07-01 07:39:07 -07:00
ptp_classifier.c
request_sock.c
rtnetlink.c	rtnelink: Move link dump consistency check out of the loop	2017-08-13 19:43:57 -07:00
scm.c	sched/headers: Prepare for new header dependencies before moving code to <linux/sched/user.h>	2017-03-02 08:42:29 +01:00
secure_seq.c	tcp: Namespaceify sysctl_tcp_timestamps	2017-06-08 10:53:29 -04:00
skbuff.c	net: convert (struct ubuf_info)->refcnt to refcount_t	2017-09-01 20:22:03 -07:00
sock_diag.c	netlink: extended ACK reporting	2017-04-13 13:58:20 -04:00
sock_reuseport.c	soreuseport: use "unsigned int" in __reuseport_alloc()	2017-04-03 19:06:38 -07:00
sock.c	neigh: increase queue_len_bytes to match wmem_default	2017-08-29 16:10:50 -07:00
stream.c	sched/headers: Prepare for new header dependencies before moving code to <linux/sched/signal.h>	2017-03-02 08:42:29 +01:00
sysctl_net_core.c	net: move somaxconn init from sysctl code	2017-05-25 13:12:17 -04:00
timestamping.c
tso.c
utils.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2017-05-02 16:40:27 -07:00