Xin Long 6b84202c94 sctp: fix the check for _sctp_walk_params and _sctp_walk_errors ... Commit b1f5bfc27a ("sctp: don't dereference ptr before leaving _sctp_walk_{params, errors}()") tried to fix the issue that it may overstep the chunk end for _sctp_walk_{params, errors} with 'chunk_end > offset(length) + sizeof(length)'. But it introduced a side effect: When processing INIT, it verifies the chunks with 'param.v == chunk_end' after iterating all params by sctp_walk_params(). With the check 'chunk_end > offset(length) + sizeof(length)', it would return when the last param is not yet accessed. Because the last param usually is fwdtsn supported param whose size is 4 and 'chunk_end == offset(length) + sizeof(length)' This is a badly issue even causing sctp couldn't process 4-shakes. Client would always get abort when connecting to server, due to the failure of INIT chunk verification on server. The patch is to use 'chunk_end <= offset(length) + sizeof(length)' instead of 'chunk_end < offset(length) + sizeof(length)' for both _sctp_walk_params and _sctp_walk_errors. Fixes: b1f5bfc27a ("sctp: don't dereference ptr before leaving _sctp_walk_{params, errors}()") Signed-off-by: Xin Long <lucien.xin@gmail.com> Acked-by: Neil Horman <nhorman@tuxdriver.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2017-07-27 00:03:12 -07:00
..
acpi	More ACPI updates for v4.13-rc1	2017-07-10 15:19:40 -07:00
asm-generic	Merge branch 'work.uaccess-unaligned' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-07-15 11:17:52 -07:00
clocksource
crypto
drm	i915, amd and some core fixes + mediatek color support	2017-07-13 11:26:18 -07:00
dt-bindings	Merge branch 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus	2017-07-15 10:59:54 -07:00
keys
kvm
linux	net: phy: Remove trailing semicolon in macro definition	2017-07-25 12:33:43 -07:00
math-emu
media	main drm pull for v4.13	2017-07-09 18:48:37 -07:00
memory
misc
net	sctp: fix the check for _sctp_walk_params and _sctp_walk_errors	2017-07-27 00:03:12 -07:00
pcmcia
ras
rdma	IB/core: Remove NOIO QP create flag	2017-07-17 21:21:24 -04:00
rxrpc
scsi	Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending	2017-07-13 14:27:32 -07:00
soc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2017-07-05 12:31:59 -07:00
sound
target	iscsi-target: Add login_keys_workaround attribute for non RFC initiators	2017-07-11 10:56:39 -07:00
trace	mm, tree wide: replace __GFP_REPEAT by __GFP_RETRY_MAYFAIL with more useful semantic	2017-07-12 16:26:03 -07:00
uapi	Second batch of KVM updates for v4.13	2017-07-15 10:18:16 -07:00
video
xen	This is the first pull request for the new dma-mapping subsystem	2017-07-06 19:20:54 -07:00