Dan Carpenter
f0965dc9e6
AX.25: Prevent integer overflows in connect and sendmsg
...
[ Upstream commit 17ad73e941b71f3bec7523ea4e9cbc3752461c2d ]
We recently added some bounds checking in ax25_connect() and
ax25_sendmsg() and we so we removed the AX25_MAX_DIGIS checks because
they were no longer required.
Unfortunately, I believe they are required to prevent integer overflows
so I have added them back.
Fixes: 8885bb0621f0 ("AX.25: Prevent out-of-bounds read in ax25_sendmsg()")
Fixes: 2f2a7ffad5c6 ("AX.25: Fix out-of-bounds read in ax25_connect()")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-07-31 18:37:48 +02:00
..
af_ax25.c
AX.25: Prevent integer overflows in connect and sendmsg
2020-07-31 18:37:48 +02:00
ax25_addr.c
ax25: remove blank line at EOF
2018-07-24 14:10:42 -07:00
ax25_dev.c
ax25: fix a use-after-free in ax25_fillin_cb()
2019-01-09 17:38:30 +01:00
ax25_ds_in.c
ax25: remove blank line at EOF
2018-07-24 14:10:42 -07:00
ax25_ds_subr.c
ax25: remove blank line at EOF
2018-07-24 14:10:42 -07:00
ax25_ds_timer.c
net: ax25: Convert timers to use timer_setup()
2017-10-25 12:03:56 +09:00
ax25_iface.c
Replace <asm/uaccess.h> with <linux/uaccess.h> globally
2016-12-24 11:46:01 -08:00
ax25_in.c
Replace <asm/uaccess.h> with <linux/uaccess.h> globally
2016-12-24 11:46:01 -08:00
ax25_ip.c
ax25: fix possible use-after-free
2019-02-23 09:07:27 +01:00
ax25_out.c
ax25: remove blank line at EOF
2018-07-24 14:10:42 -07:00
ax25_route.c
ax25: fix inconsistent lock state in ax25_destroy_timer
2019-06-22 08:15:13 +02:00
ax25_std_in.c
Replace <asm/uaccess.h> with <linux/uaccess.h> globally
2016-12-24 11:46:01 -08:00
ax25_std_subr.c
Replace <asm/uaccess.h> with <linux/uaccess.h> globally
2016-12-24 11:46:01 -08:00
ax25_std_timer.c
Replace <asm/uaccess.h> with <linux/uaccess.h> globally
2016-12-24 11:46:01 -08:00
ax25_subr.c
ax25: Fix segfault after sock connection timeout
2017-01-16 14:39:58 -05:00
ax25_timer.c
net: ax25: Convert timers to use timer_setup()
2017-10-25 12:03:56 +09:00
ax25_uid.c
proc: introduce proc_create_seq{,_data}
2018-05-16 07:23:35 +02:00
Kconfig
Update broken web addresses in the kernel.
2010-10-18 11:03:14 +02:00
Makefile
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
sysctl_net_ax25.c
net: Convert uses of typedef ctl_table to struct ctl_table
2013-06-13 02:36:09 -07:00
TODO
[AX25]: Remove obsolete references to BKL from TODO file.
2008-03-26 02:14:38 -07:00