Willem de Bruijn 4f0c40d944 dccp: limit sk_filter trim to payload ... Dccp verifies packet integrity, including length, at initial rcv in dccp_invalid_packet, later pulls headers in dccp_enqueue_skb. A call to sk_filter in-between can cause __skb_pull to wrap skb->len. skb_copy_datagram_msg interprets this as a negative value, so (correctly) fails with EFAULT. The negative length is reported in ioctl SIOCINQ or possibly in a DCCP_WARN in dccp_close. Introduce an sk_receive_skb variant that caps how small a filter program can trim packets, and call this in dccp with the header length. Excessively trimmed packets are now processed normally and queued for reception as 0B payloads. Fixes: 7c657876b6 ("[DCCP]: Initial implementation") Signed-off-by: Willem de Bruijn <willemb@google.com> Acked-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2016-07-13 11:53:41 -07:00
..
datagram.c	udp: enable MSG_PEEK at non-zero offset	2016-04-05 16:29:37 -04:00
dev_addr_lists.c
dev_ioctl.c
dev.c	net: also make sch_handle_egress() drop monitor ready	2016-05-16 14:02:44 -04:00
devlink.c	devlink: implement shared buffer occupancy monitoring interface	2016-04-14 16:22:03 -04:00
drop_monitor.c
dst_cache.c	net: dst_cache_per_cpu_dst_set() can be static	2016-03-18 17:45:08 -04:00
dst.c	net: add dst_cache to ovs vxlan lwtunnel	2016-02-16 20:21:48 -05:00
ethtool.c	net: define gso types for IPx over IPv4 and IPv6	2016-05-20 18:03:15 -04:00
fib_rules.c	libnl: nla_put_be64(): align on a 64-bit area	2016-04-23 20:13:24 -04:00
filter.c	rose: limit sk_filter trim to payload	2016-07-13 11:53:40 -07:00
flow_dissector.c	packet: Use symmetric hash for PACKET_FANOUT_HASH.	2016-07-01 16:07:50 -04:00
flow.c	flowcache: Avoid OOM condition under preasure	2016-03-17 10:28:42 +01:00
gen_estimator.c	net: sched: Add description for cpu_bstats argument	2016-03-20 16:48:07 -04:00
gen_stats.c	net_sched: add missing paddattr description	2016-06-08 11:17:39 -07:00
hwbm.c	net: hwbm: Fix unbalanced spinlock in error case	2016-05-25 12:35:09 -07:00
link_watch.c
lwtunnel.c	lwtunnel: autoload of lwt modules	2016-02-21 22:00:28 -05:00
Makefile	net: add a hardware buffer management helper API	2016-03-14 12:19:46 -04:00
neighbour.c	neigh: Explicitly declare RCU-bh read side critical section in neigh_xmit()	2016-06-29 07:58:28 -04:00
net_namespace.c	netns: make nsid_lock per net	2015-05-17 23:41:11 -04:00
net-procfs.c	net: remove NETDEV_TX_LOCKED support	2016-04-26 15:53:05 -04:00
net-sysfs.c	net-sysfs: fix missing <linux/of_net.h>	2016-06-08 00:37:58 -07:00
net-sysfs.h
net-traces.c	net: IPv6 fib lookup tracepoint	2015-11-22 11:54:10 -05:00
netclassid_cgroup.c	core: remove unneded headers for net cgroup controllers.	2016-02-17 15:31:27 -05:00
netevent.c	netevent: remove automatic variable in register_netevent_notifier()	2015-05-31 00:03:21 -07:00
netpoll.c	Revert "netpoll: Fix extra refcount release in netpoll_cleanup()"	2016-04-05 19:34:44 -04:00
netprio_cgroup.c	core: remove unneded headers for net cgroup controllers.	2016-02-17 15:31:27 -05:00
pktgen.c	net: pktgen: Call destroy_hrtimer_on_stack()	2016-05-31 11:44:08 -07:00
ptp_classifier.c	ptp: Change ptp_class to a proper bitmask	2015-11-03 11:08:22 -05:00
request_sock.c	tcp: restore fastopen operations	2015-10-05 03:19:06 -07:00
rtnetlink.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-05-09 15:59:24 -04:00
scm.c	unix: correctly track in-flight fds in sending process user_struct	2016-02-08 10:30:42 -05:00
secure_seq.c	net: remove a sparse error in secure_dccpv6_sequence_number()	2015-05-25 22:55:37 -04:00
skbuff.c	net_sched: fix mirrored packets checksum	2016-07-01 16:19:34 -04:00
sock_diag.c	sock_diag: align nlattr properly when needed	2016-04-26 12:00:48 -04:00
sock_reuseport.c	soreuseport: fix NULL ptr dereference SO_REUSEPORT after bind	2016-01-19 14:44:23 -05:00
sock.c	dccp: limit sk_filter trim to payload	2016-07-13 11:53:41 -07:00
stream.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-12-03 21:09:12 -05:00
sysctl_net_core.c	bpf: add generic constant blinding for use in jits	2016-05-16 13:49:32 -04:00
timestamping.c	net: skb_defer_rx_timestamp should check for phydev before setting up classify	2015-07-09 14:17:15 -07:00
tso.c	net: tso: add support for IPv6	2015-10-26 22:24:22 -07:00
utils.c	net: move net_get_random_once to lib	2015-10-08 05:26:35 -07:00