TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
8cf295c38ddeb44806fd71a8363cce9914a52bc4
twx-linux/drivers
T
History
Cong Wang 1148831a79 bonding: validate ip header before check IPPROTO_IGMP 
[ Upstream commit 9d1bc24b52 ]

bond_xmit_roundrobin() checks for IGMP packets but it parses
the IP header even before checking skb->protocol.

We should validate the IP header with pskb_may_pull() before
using iph->protocol.

Reported-and-tested-by: syzbot+e5be16aa39ad6e755391@syzkaller.appspotmail.com
Fixes: a2fd940f4c ("bonding: fix broken multicast with round-robin mode")
Cc: Jay Vosburgh <j.vosburgh@gmail.com>
Cc: Veaceslav Falico <vfalico@gmail.com>
Cc: Andy Gospodarek <andy@greyhouse.net>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-07-31 07:28:46 +02:00
..
accessibility
…
acpi
pstore: Convert buf_lock to semaphore
2019-06-11 12:21:48 +02:00
amba
…
android
binder: fix memory leak in error path
2019-07-21 09:04:36 +02:00
ata
libata: don't request sense data on !ZAC ATA devices
2019-07-31 07:28:30 +02:00
atm
…
auxdisplay
…
base
regmap: fix bulk writes on paged registers
2019-07-31 07:28:25 +02:00
bcma
…
block
floppy: fix out-of-bounds read in copy_buffer
2019-07-31 07:28:34 +02:00
bluetooth
Bluetooth: hci_bcsp: Fix memory leak in rx_skb
2019-07-31 07:28:32 +02:00
bus
…
cdrom
…
char
hwrng: omap - Set default quality
2019-05-31 06:47:34 -07:00
clk
clk: ti: clkctrl: Fix returning uninitialized data
2019-07-21 09:04:37 +02:00
clocksource
clocksource/drivers/exynos_mct: Increase priority over ARM arch timer
2019-07-31 07:28:30 +02:00
connector
…
cpufreq
cpufreq: kirkwood: fix possible object reference leak
2019-05-31 06:47:29 -07:00
cpuidle
…
crypto
crypto: caam - limit output IV to CBC to work around CTR mode DMA issue
2019-07-31 07:28:42 +02:00
dax
…
dca
…
devfreq
…
dio
…
dma
dmaengine: imx-sdma: fix use-after-free on probe error path
2019-07-31 07:28:18 +02:00
dma-buf
…
edac
EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
2019-07-31 07:28:31 +02:00
eisa
…
extcon
extcon: arizona: Disable mic detect if running when driver is removed
2019-05-31 06:47:28 -07:00
firewire
…
firmware
efi/bgrt: Drop BGRT status field reserved bits check
2019-07-21 09:04:38 +02:00
fmc
…
fpga
…
fsi
…
gpio
gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
2019-07-31 07:28:32 +02:00
gpu
gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM
2019-07-31 07:28:41 +02:00
hid
HID: wacom: correct touch resolution x/y typo
2019-07-31 07:28:41 +02:00
hsi
…
hv
…
hwmon
hwmon: (pmbus/core) Treat parameters as paged if on multiple pages
2019-06-25 11:36:53 +08:00
hwspinlock
…
hwtracing
intel_th: msu: Fix single mode with disabled IOMMU
2019-07-31 07:28:43 +02:00
i2c
i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
2019-06-22 08:16:17 +02:00
ide
…
idle
…
iio
iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data
2019-05-31 06:47:29 -07:00
infiniband
ipoib: correcly show a VF hardware address
2019-07-31 07:28:26 +02:00
input
Input: alps - fix a mismatch between a condition check and its comment
2019-07-31 07:28:36 +02:00
iommu
iommu: Fix a leak in iommu_insert_resv_region
2019-07-31 07:28:24 +02:00
ipack
…
irqchip
Revert "MIPS: perf: ath79: Fix perfcount IRQ assignment"
2019-06-11 12:21:49 +02:00
isdn
mISDN: make sure device name is NUL terminated
2019-06-22 08:16:16 +02:00
leds
…
lightnvm
…
macintosh
…
mailbox
…
mcb
…
md
dm bufio: fix deadlock with loop device
2019-07-31 07:28:43 +02:00
media
media: coda: Remove unbalanced and unneeded mutex unlock
2019-07-31 07:28:38 +02:00
memory
…
memstick
…
message
…
mfd
mfd: twl6040: Fix device init errors for ACCCTL register
2019-06-15 11:54:52 +02:00
misc
VMCI: Fix integer overflow in VMCI handle arrays
2019-07-21 09:04:37 +02:00
mmc
mmc: core: Prevent processing SDIO IRQs when the card is suspended
2019-06-25 11:36:50 +08:00
mtd
…
mux
…
net
bonding: validate ip header before check IPPROTO_IGMP
2019-07-31 07:28:46 +02:00
nfc
…
ntb
…
nubus
…
nvdimm
libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
2019-07-31 07:28:41 +02:00
nvme
nvme: Fix u32 overflow in the number of namespace list calculation
2019-06-25 11:36:53 +08:00
nvmem
nvmem: core: fix read buffer in place
2019-06-15 11:54:54 +02:00
of
…
oprofile
…
parisc
parisc: Use implicit space register selection for loading the coherence index of I/O pdirs
2019-06-11 12:21:47 +02:00
parport
parport: Fix mem leak in parport_register_dev_model
2019-06-25 11:36:51 +08:00
pci
PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
2019-07-31 07:28:41 +02:00
pcmcia
…
perf
…
phy
phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode
2019-05-31 06:47:26 -07:00
pinctrl
pinctrl: samsung: fix leaked of_node references
2019-05-31 06:47:24 -07:00
platform
platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device registration
2019-07-10 09:54:35 +02:00
pnp
…
power
power: supply: max14656: fix potential use-before-alloc
2019-06-15 11:54:57 +02:00
powercap
…
pps
…
ps3
…
ptp
…
pwm
pwm: Fix deadlock warning when removing PWM device
2019-06-15 11:54:59 +02:00
rapidio
rapidio: fix a NULL pointer dereference when create_workqueue() fails
2019-06-15 11:54:50 +02:00
ras
RAS/CEC: Fix pfn insertion
2019-07-31 07:28:24 +02:00
regulator
regulator: s2mps11: Fix buck7 and buck8 wrong voltages
2019-07-31 07:28:36 +02:00
remoteproc
…
reset
…
rpmsg
…
rtc
rtc: pcf8523: don't return invalid date when battery is low
2019-06-19 08:21:00 +02:00
s390
s390/qdio: handle PENDING state for QEBSM devices
2019-07-31 07:28:23 +02:00
sbus
…
scsi
scsi: mac_scsi: Fix pseudo DMA implementation, take 2
2019-07-31 07:28:35 +02:00
sfi
…
sh
…
sn
…
soc
soc: rockchip: Set the proper PWM for rk3288
2019-06-15 11:54:55 +02:00
spi
spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
2019-07-10 09:54:31 +02:00
spmi
…
ssb
…
staging
media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails.
2019-07-31 07:28:22 +02:00
target
scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported
2019-07-31 07:28:18 +02:00
tc
…
tee
…
thermal
drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER
2019-06-15 11:54:52 +02:00
thunderbolt
thunderbolt: Fix to check for kmemdup failure
2019-05-31 06:47:34 -07:00
tty
Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
2019-07-21 09:04:34 +02:00
uio
…
usb
usb: Handle USB3 remote wakeup for LPM enabled devices correctly
2019-07-31 07:28:43 +02:00
uwb
…
vfio
vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING"
2019-06-15 11:54:54 +02:00
vhost
vhost_net: disable zerocopy by default
2019-07-31 07:28:26 +02:00
video
video: imsttfb: fix potential NULL pointer dereferences
2019-06-15 11:54:57 +02:00
virt
…
virtio
…
vlynq
…
vme
…
w1
…
watchdog
watchdog: fix compile time error of pretimeout governors
2019-06-15 11:54:54 +02:00
xen
xen/events: fix binding user event channels to cpus
2019-07-31 07:28:39 +02:00
zorro
…
Kconfig
…
Makefile
…