Eric Dumazet 66cdd43475 netlabel: out of bound access in cipso_v4_validate() ...

[ Upstream commit d71b789688 ]

syzkaller found another out of bound access in ip_options_compile(),
or more exactly in cipso_v4_validate()

Fixes: 20e2a86485 ("cipso: handle CIPSO options correctly when NetLabel is disabled")
Fixes: 446fda4f26 ("[NetLabel]: CIPSOv4 engine")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Dmitry Vyukov  <dvyukov@google.com>
Cc: Paul Moore <paul@paul-moore.com>
Acked-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-02-18 15:11:41 +01:00

..

acpi

…

asm-generic

asm-prototypes: Clear any CPP defines before declaring the functions

2017-01-12 11:39:07 +01:00

clocksource

…

crypto

crypto: drbg - prevent invalid SG mappings

2016-11-30 19:46:44 +08:00

drm

…

dt-bindings

ARM: dts: r8a7794: remove Z clock

2017-01-26 08:24:36 +01:00

keys

…

kvm

…

linux

can: Fix kernel panic at security_sock_rcv_skb

2017-02-18 15:11:40 +01:00

math-emu

…

media

…

memory

…

misc

…

net

netlabel: out of bound access in cipso_v4_validate()

2017-02-18 15:11:41 +01:00

pcmcia

…

ras

…

rdma

IB/cma: Fix a race condition in iboe_addr_get_sgid()

2017-01-09 08:32:23 +01:00

rxrpc

…

scsi

…

soc

…

sound

ASoC: hdmi-codec: use unsigned type to structure members with bit-field

2017-01-19 20:18:02 +01:00

target

target: Fix multi-session dynamic se_node_acl double free OOPs

2017-02-14 15:25:36 -08:00

trace

swiotlb: Add swiotlb=noforce debug option

2017-01-26 08:24:44 +01:00

uapi

IB/cxgb3: fix misspelling in header guard

2017-02-01 08:33:07 +01:00

video

…

xen

…

Kbuild

…