Pekka Enberg 93bc4e89c2 netfilter: fix double-free and use-after free ... As suggested by Patrick McHardy, introduce a __krealloc() that doesn't free the original buffer to fix a double-free and use-after-free bug introduced by me in netfilter that uses RCU. Reported-by: Patrick McHardy <kaber@trash.net> Signed-off-by: Pekka Enberg <penberg@cs.helsinki.fi> Tested-by: Dieter Ries <clip2@gmx.de> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2008-07-26 17:49:33 -07:00
..
allocpercpu.c	Christoph has moved	2008-07-04 10:40:04 -07:00
backing-dev.c	mm: bdi: fix race in bdi_class device creation	2008-05-20 13:31:53 -07:00
bootmem.c	Add return value to reserve_bootmem_node()	2008-06-21 11:25:10 -07:00
bounce.c	block: Initial support for data-less (or empty) barrier support	2007-10-16 11:03:56 +02:00
dmapool.c	dmapool: enable debugging for CONFIG_SLUB_DEBUG_ON too	2008-04-28 08:58:20 -07:00
fadvise.c	xip: support non-struct page backed memory	2008-04-28 08:58:23 -07:00
filemap_xip.c	xip: support non-struct page backed memory	2008-04-28 08:58:23 -07:00
filemap.c	vfs: export filemap_fdatawrite_range()	2008-07-11 19:27:31 -04:00
fremap.c	mm: fix various kernel-doc comments	2008-03-19 18:53:35 -07:00
highmem.c	highmem: Export totalhigh_pages.	2008-07-19 22:39:46 -07:00
hugetlb.c	hugetlb: fix lockdep error	2008-06-06 11:29:09 -07:00
internal.h	memory hotplug: free memmaps allocated by bootmem	2008-04-28 08:58:26 -07:00
Kconfig	Merge git://git.kernel.org/pub/scm/linux/kernel/git/hskinnemoen/avr32-2.6	2008-07-14 13:37:29 -07:00
maccess.c	kgdb: fix optional arch functions and probe_kernel_*	2008-04-17 20:05:39 +02:00
madvise.c	xip: support non-struct page backed memory	2008-04-28 08:58:23 -07:00
Makefile	uaccess: add probe_kernel_write()	2008-04-17 20:05:36 +02:00
memcontrol.c	memcg: simple stats for memory resource controller	2008-05-01 08:04:02 -07:00
memory_hotplug.c	memory_hotplug: always initialize pageblock bitmap	2008-05-14 19:11:15 -07:00
memory.c	get_user_pages(): fix possible page leak on oom	2008-07-04 10:40:04 -07:00
mempolicy.c	mempolicy: mask off internal flags for userspace API	2008-07-04 13:03:05 -07:00
mempool.c	spelling fixes: mm/	2007-10-20 01:27:18 +02:00
migrate.c	Christoph has moved	2008-07-04 10:40:04 -07:00
mincore.c	mm: remove nopage	2008-04-28 08:58:18 -07:00
mlock.c	do not limit locked memory when RLIMIT_MEMLOCK is RLIM_INFINITY	2007-07-16 09:05:37 -07:00
mmap.c	mm: Allow architectures to define additional protection bits	2008-07-09 16:30:45 +10:00
mmzone.c	mm: filter based on a nodemask as well as a gfp_mask	2008-04-28 08:58:19 -07:00
mprotect.c	Merge commit '85082fd7cbe3173198aac0eb5e85ab1edcc6352c' into test-build	2008-07-15 15:44:51 +10:00
mremap.c	sparse pointer use of zero as null	2007-10-18 14:37:31 -07:00
msync.c	Detach sched.h from mm.h	2007-05-21 09:18:19 -07:00
nommu.c	nommu: Correct kobjsize() page validity checks.	2008-06-12 07:56:17 -07:00
oom_kill.c	oom_kill: remove unused parameter in badness()	2008-04-28 08:58:26 -07:00
page_alloc.c	Merge branch 'generic-ipi' into generic-ipi-for-linus	2008-07-15 21:55:59 +02:00
page_io.c	mm: fix PageUptodate data race	2008-02-05 09:44:19 -08:00
page_isolation.c	memory hotremove: unset migrate type "ISOLATE" after removal	2007-11-14 18:45:38 -08:00
page-writeback.c	Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4	2008-07-15 08:36:38 -07:00
pagewalk.c	pagemap: pass mm into pagewalkers	2008-06-12 18:05:41 -07:00
pdflush.c	mm/pdflush.c: merge the same code in two path	2008-05-13 08:02:24 -07:00
prio_tree.c	spelling fixes: mm/	2007-10-20 01:27:18 +02:00
quicklist.c	quicklists: Only consider memory that can be used with GFP_KERNEL	2008-01-14 08:52:22 -08:00
readahead.c	mm: bdi: export BDI attributes in sysfs	2008-04-30 08:29:49 -07:00
rmap.c	mm: remove nopage	2008-04-28 08:58:18 -07:00
shmem_acl.c	[PATCH] Fix typos in mm/shmem_acl.c	2006-10-11 11:14:23 -07:00
shmem.c	mm: bdi: add separate writeback accounting capability	2008-04-30 08:29:50 -07:00
slab.c	Merge branch 'generic-ipi' into generic-ipi-for-linus	2008-07-15 21:55:59 +02:00
slob.c	slob: Fix to return wrong pointer	2008-05-19 20:55:25 +03:00
slub.c	slub: dump more data on slab corruption	2008-07-19 14:17:22 +03:00
sparse-vmemmap.c	Christoph has moved	2008-07-04 10:40:04 -07:00
sparse.c	revert "memory hotplug: allocate usemap on the section with pgdat"	2008-04-30 08:29:55 -07:00
swap_state.c	mm: bdi: add separate writeback accounting capability	2008-04-30 08:29:50 -07:00
swap.c	mm: fix atomic_t overflow in vm	2008-05-24 09:56:09 -07:00
swapfile.c	mm: use non-racy method for /proc/swaps creation	2008-04-29 08:06:20 -07:00
thrash.c	Bug in mm/thrash.c function grab_swap_token()	2007-05-11 08:29:32 -07:00
tiny-shmem.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6	2008-03-25 08:57:47 -07:00
truncate.c	fix invalidate_inode_pages2_range() to not clear ret	2008-04-28 08:58:18 -07:00
util.c	netfilter: fix double-free and use-after free	2008-07-26 17:49:33 -07:00
vmalloc.c	docbook: fix vmalloc missing parameter notation	2008-05-01 08:03:59 -07:00
vmscan.c	mm: fix incorrect variable type in do_try_to_free_pages()	2008-06-12 18:05:39 -07:00
vmstat.c	make vmstat cpu-unplug safe	2008-05-13 08:02:23 -07:00