Reshetova, Elena
35b2e8cc1f
net: convert packet_fanout.sk_ref from atomic_t to refcount_t
...
refcount_t type and corresponding API should be
used instead of atomic_t when the variable is used as
a reference counter. This allows to avoid accidental
refcounter overflows that might lead to use-after-free
situations.
Signed-off-by: Elena Reshetova <elena.reshetova@intel.com>
Signed-off-by: Hans Liljestrand <ishkamiel@gmail.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: David Windsor <dwindsor@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Change-Id: Ibcded37762b5421cb3b81ca19b1f13a101ac3958
Git-repo: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Git-commit: fb5c2c17a556d9b00798d6a6b9e624281ee2eb28
[dcagle@codeaurora.org: Change one more atomic ref to refcount]
Signed-off-by: Dennis Cagle <dcagle@codeaurora.org>
2018-05-31 22:34:37 -07:00
..
6lowpan
9p
9p/trans_virtio: discard zero-length reply
2018-02-22 15:43:50 +01:00
802
8021q
vlan: also check phy_driver ts_info for vlan's real device
2018-04-13 19:48:34 +02:00
appletalk
atm
ax25
batman-adv
batman-adv: handle race condition for claims between gateways
2018-03-22 09:17:41 +01:00
bluetooth
This is the 4.9.95 stable release
2018-04-20 10:06:49 -07:00
bridge
Merge android-4.9.93 ( 05baf14) into msm-4.9
2018-05-11 03:06:00 -07:00
caif
net: caif: Fix a sleep-in-atomic bug in cfpkt_create_pfx
2017-07-05 14:40:14 +02:00
can
can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once
2018-01-31 12:55:50 +01:00
ceph
libceph: NULL deref on crush_decode() error path
2018-04-13 19:48:05 +02:00
core
Merge android-4.9.94 ( 8683408) into msm-4.9
2018-05-11 03:07:46 -07:00
dcb
dccp
dccp: check sk for closed state in dccp_sendmsg()
2018-03-31 18:11:33 +02:00
decnet
dn_getsockoptdecnet: move nf_{get/set}sockopt outside sock lock
2018-02-25 11:05:44 +01:00
dns_resolver
This is the 4.9.59 stable release
2017-10-30 09:27:09 +01:00
dsa
net: dsa: select NET_SWITCHDEV
2017-11-15 15:53:17 +01:00
embms_kernel
net/embms-kernel : Fix for embms-kernel compilation issues
2017-11-15 01:31:05 -08:00
ethernet
net: introduce device min_header_len
2017-02-18 15:11:43 +01:00
hsr
hsr: fix incorrect warning
2018-04-13 19:48:29 +02:00
ieee802154
net: ieee802154: fix net_device reference release too early
2018-04-13 19:48:04 +02:00
ipc_router
net: ipc_router: Remove wakeup-source for Sensor ports
2018-04-26 09:11:07 +05:30
ipv4
Merge android-4.9.94 ( 8683408) into msm-4.9
2018-05-11 03:07:46 -07:00
ipv6
Merge "Merge android-4.9.95 ( b4c14c2) into msm-4.9"
2018-05-16 10:28:48 -07:00
ipx
ipx: call ipxitf_put() in ioctl error path
2017-05-25 15:44:41 +02:00
irda
irda: do not leak initialized list.dev to userspace
2017-08-30 10:21:42 +02:00
iucv
net/iucv: Free memory obtained by kzalloc
2018-03-31 18:11:34 +02:00
kcm
kcm: lock lower socket in kcm_attach
2018-03-31 18:11:35 +02:00
key
af_key: Fix slab-out-of-bounds in pfkey_compile_policy.
2018-04-13 19:47:51 +02:00
l2tp
This is the 4.9.94 stable release
2018-04-14 15:40:56 +02:00
l3mdev
lapb
llc
net: llc: add lock_sock in llc_ui_bind to avoid a race condition
2018-04-13 19:48:07 +02:00
mac80211
Merge android-4.9.94 ( 8683408) into msm-4.9
2018-05-11 03:07:46 -07:00
mac802154
mpls
mpls, nospec: Sanitize array index in mpls_label_ok()
2018-03-11 16:21:34 +01:00
ncsi
netfilter
Merge android-4.9.94 ( 8683408) into msm-4.9
2018-05-11 03:07:46 -07:00
netlabel
netlink
Merge android-4.9.94 ( 8683408) into msm-4.9
2018-05-11 03:07:46 -07:00
netrom
nfc
This is the 4.9.66 stable release
2017-11-30 16:45:49 +00:00
openvswitch
openvswitch: Delete conntrack entry clashing with an expectation.
2018-03-24 11:00:14 +01:00
packet
net: convert packet_fanout.sk_ref from atomic_t to refcount_t
2018-05-31 22:34:37 -07:00
phonet
qrtr
net: qrtr: Mark 'buf' as little endian
2017-12-09 22:01:51 +01:00
rds
rds: MP-RDS may use an invalid c_path
2018-04-20 08:21:07 +02:00
rfkill
ANDROID: rfkill: fix unused function warning
2017-05-12 14:41:44 +02:00
rmnet_data
rmnet_data: Fix use-after-free in rmnet_vnd_create_dev
2018-05-09 23:56:17 +05:30
rose
rxrpc
rxrpc: check return value of skb_to_sgvec always
2018-04-13 19:48:31 +02:00
sched
Merge android-4.9.94 ( 8683408) into msm-4.9
2018-05-11 03:07:46 -07:00
sctp
sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
2018-04-13 19:48:33 +02:00
strparser
strparser: Fix sign of err codes
2018-04-13 19:48:36 +02:00
sunrpc
This is the 4.9.96 stable release
2018-04-24 11:26:46 +02:00
switchdev
tipc
tipc: check return value of nlmsg_new
2018-03-24 11:00:14 +01:00
unix
Merge remote-tracking branch '4.9/tmp-8cca21f' into 4.9
2017-11-29 13:12:37 -08:00
vmw_vsock
vsock: cancel packets when failing to connect
2017-12-25 14:23:38 +01:00
wimax
wireless
Merge "nl80211: fix nlmsg allocation in cfg80211_ft_event"
2018-05-23 05:32:40 -07:00
x25
net: x25: fix one potential use-after-free issue
2018-04-13 19:48:00 +02:00
xfrm
Merge android-4.9.94 ( 8683408) into msm-4.9
2018-05-11 03:07:46 -07:00
compat.c
audit: log 32-bit socketcalls
2017-10-08 10:26:06 +02:00
Kconfig
Merge android-4.9.86 ( b324a70) into msm-4.9
2018-04-17 10:33:48 -07:00
Makefile
socket.c
net: socket: Added notifier chains for socket administrative functions
2018-02-19 06:20:15 -08:00
sysctl_net.c