Willem de Bruijn 9e8db59132 net: avoid false positives in untrusted gso validation ... GSO packets with vnet_hdr must conform to a small set of gso_types. The below commit uses flow dissection to drop packets that do not. But it has false positives when the skb is not fully initialized. Dissection needs skb->protocol and skb->network_header. Infer skb->protocol from gso_type as the two must agree. SKB_GSO_UDP can use both ipv4 and ipv6, so try both. Exclude callers for which network header offset is not known. Fixes: d5be7f632b ("net: validate untrusted gso packets without csum offload") Signed-off-by: Willem de Bruijn <willemb@google.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2019-02-21 14:08:13 -08:00
..
acpi	Merge branch 'x86-cleanups-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-12-26 17:03:51 -08:00
asm-generic	Rename include/{uapi => }/asm-generic/shmparam.h really	2019-02-12 16:33:18 -08:00
clocksource
crypto	crypto: skcipher - remove remnants of internal IV generators	2018-12-23 11:52:45 +08:00
drm	Merge tag 'drm-intel-fixes-2019-01-11' of git://anongit.freedesktop.org/drm/drm-intel into drm-fixes	2019-01-11 10:26:21 +01:00
dt-bindings	ARM: SoC fixes for linux-5.0	2019-02-08 16:23:41 -08:00
keys
kvm	KVM: arm/arm64: vgic: Make vgic_cpu->ap_list_lock a raw_spinlock	2019-01-24 15:09:09 +01:00
linux	net: avoid false positives in untrusted gso validation	2019-02-21 14:08:13 -08:00
math-emu
media	media fixes for v4.20-rc8	2018-12-25 13:11:30 -08:00
memory
misc
net	net: fix possible overflow in __sk_mem_raise_allocated()	2019-02-13 21:05:18 -08:00
pcmcia
ras
rdma	RDMA/device: Expose ib_device_try_get(()	2019-01-21 14:33:08 -07:00
scsi	4.21 merge window pull request	2018-12-28 14:57:10 -08:00
soc	ARM: SoC driver updates	2018-12-31 17:32:35 -08:00
sound	ALSA: compress: Fix stop handling on compressed capture streams	2019-02-05 22:01:41 +01:00
target
trace	afs: Fix race in async call refcounting	2019-01-17 15:17:28 +00:00
uapi	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-02-15 08:00:11 -08:00
video
xen	arm64/xen: fix xen-swiotlb cache flushing	2019-01-23 22:14:56 +01:00