Jeremy Sowden d169887d82 netfilter: ip6_tables: zero-initialize fragment offset ...

[ Upstream commit 310e2d43c3 ]

ip6tables only sets the `IP6T_F_PROTO` flag on a rule if a protocol is
specified (`-p tcp`, for example).  However, if the flag is not set,
`ip6_packet_match` doesn't call `ipv6_find_hdr` for the skb, in which
case the fragment offset is left uninitialized and a garbage value is
passed to each matcher.

Signed-off-by: Jeremy Sowden <jeremy@azazel.net>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2021-10-17 10:19:48 +02:00

..

ila

…

netfilter

netfilter: ip6_tables: zero-initialize fragment offset

2021-10-17 10:19:48 +02:00

addrconf_core.c

…

addrconf.c

ipv6: set multicast flag on the multicast route

2021-01-27 11:05:43 +01:00

addrlabel.c

ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init

2020-12-08 10:18:51 +01:00

af_inet6.c

…

ah6.c

ah6: fix error return code in ah6_input()

2020-11-24 13:27:15 +01:00

anycast.c

…

calipso.c

cipso,calipso: resolve a number of problems with the DOI refcounts

2021-03-17 16:43:44 +01:00

datagram.c

…

esp6_offload.c

…

esp6.c

esp: avoid unneeded kmap_atomic call

2021-01-23 15:49:55 +01:00

exthdrs_core.c

…

exthdrs_offload.c

…

exthdrs.c

ipv6: fix out-of-bound access in ip6_parse_tlv()

2021-07-20 16:15:52 +02:00

fib6_notifier.c

…

fib6_rules.c

…

fou6.c

…

icmp.c

net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending

2021-03-04 09:39:59 +01:00

inet6_connection_sock.c

…

inet6_hashtables.c

…

ip6_checksum.c

…

ip6_fib.c

net: ipv6: fib: flush exceptions when purging route

2021-01-17 14:04:19 +01:00

ip6_flowlabel.c

…

ip6_gre.c

ipv6: remove extra dev_hold() for fallback tunnels

2021-05-22 10:59:50 +02:00

ip6_icmp.c

net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending

2021-03-04 09:39:59 +01:00

ip6_input.c

ipv6: weaken the v4mapped source check

2021-04-07 12:48:47 +02:00

ip6_offload.c

…

ip6_offload.h

…

ip6_output.c

ipv6: fix 'disable_policy' for fwd packets

2021-07-28 11:13:47 +02:00

ip6_tunnel.c

ipv6: remove extra dev_hold() for fallback tunnels

2021-05-22 10:59:50 +02:00

ip6_udp_tunnel.c

…

ip6_vti.c

ipv6: remove extra dev_hold() for fallback tunnels

2021-05-22 10:59:50 +02:00

ip6mr.c

…

ipcomp6.c

…

ipv6_sockglue.c

…

Kconfig

net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC

2020-09-26 18:01:29 +02:00

Makefile

…

mcast_snoop.c

…

mcast.c

mld: fix panic in mld_newpack()

2021-06-03 08:38:11 +02:00

mip6.c

…

ndisc.c

…

netfilter.c

netfilter: use actual socket sk rather than skb sk when routing harder

2020-11-18 19:18:44 +01:00

output_core.c

ipv6: use prandom_u32() for ID generation

2021-07-20 16:16:00 +02:00

ping.c

…

proc.c

…

protocol.c

…

raw.c

net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind()

2021-04-14 08:22:33 +02:00

reassembly.c

ipv6: record frag_max_size in atomic fragments in input path

2021-06-03 08:38:12 +02:00

route.c

net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh

2021-04-14 08:22:32 +02:00

seg6_hmac.c

…

seg6_iptunnel.c

…

seg6_local.c

…

seg6.c

…

sit.c

ipv6: remove extra dev_hold() for fallback tunnels

2021-05-22 10:59:50 +02:00

syncookies.c

net: Update window_clamp if SOCK_RCVBUF is set

2020-11-18 19:18:51 +01:00

sysctl_net_ipv6.c

…

tcp_ipv6.c

ipv6: tcp: drop silly ICMPv6 packet too big messages

2021-07-28 11:13:45 +02:00

tcpv6_offload.c

…

tunnel6.c

…

udp_impl.h

…

udp_offload.c

…

udp.c

net: udp: annotate data race around udp_sk(sk)->corkflag

2021-10-06 15:31:25 +02:00

udplite.c

…

xfrm6_input.c

…

xfrm6_mode_beet.c

…

xfrm6_mode_ro.c

…

xfrm6_mode_transport.c

…

xfrm6_mode_tunnel.c

…

xfrm6_output.c

net: ipv6: fix return value of ip6_skb_dst_mtu

2021-07-28 11:13:44 +02:00

xfrm6_policy.c

…

xfrm6_protocol.c

…

xfrm6_state.c

…

xfrm6_tunnel.c

…