Patrick McHardy 703b697913 [PATCH] Fix another crash in ip_nat_pptp (CVE-2006-0037) ...

The PPTP NAT helper calculates the offset at which the packet needs
to be mangled as difference between two pointers to the header. With
non-linear skbs however the pointers may point to two seperate buffers
on the stack and the calculation results in a wrong offset beeing
used.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2006-01-30 22:42:30 -08:00

..

ipvs

[PATCH] ipvs: fix connection leak if expire_nodest_conn=1

2005-11-10 21:18:55 -08:00

netfilter

[PATCH] Fix another crash in ip_nat_pptp (CVE-2006-0037)

2006-01-30 22:42:30 -08:00

af_inet.c

…

ah4.c

…

arp.c

[IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnl

2005-10-03 14:35:55 -07:00

datagram.c

…

devinet.c

[IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnl

2005-10-03 14:35:55 -07:00

esp4.c

[IPSEC] Fix block size/MTU bugs in ESP

2005-10-10 21:11:34 -07:00

fib_frontend.c

[PATCH] NETLINK: Fix processing of fib_lookup netlink messages

2005-12-14 15:42:55 -08:00

fib_hash.c

…

fib_lookup.h

…

fib_rules.c

…

fib_semantics.c

[IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnl

2005-10-03 14:35:55 -07:00

fib_trie.c

[IPV4]: fib_trie root-node expansion

2005-10-04 13:01:58 -07:00

icmp.c

[IPV4]: Update icmp sysctl docs and disable broadcast ECHO/TIMESTAMP by default

2005-10-03 16:07:30 -07:00

igmp.c

[IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnl

2005-10-03 14:35:55 -07:00

inet_connection_sock.c

[PATCH] gfp flags annotations - part 1

2005-10-08 15:00:57 -07:00

inet_diag.c

…

inet_hashtables.c

…

inet_timewait_sock.c

[TWSK]: Grab the module refcount for timewait sockets

2005-10-10 21:25:23 -07:00

inetpeer.c

[PATCH] timer initialization cleanup: DEFINE_TIMER

2005-09-09 14:03:48 -07:00

ip_forward.c

…

ip_fragment.c

…

ip_gre.c

[PATCH] Fix hardware checksum modification

2005-12-26 16:08:56 -08:00

ip_input.c

…

ip_options.c

…

ip_output.c

[SK_BUFF]: ipvs_property field must be copied

2005-10-22 17:06:01 -02:00

ip_sockglue.c

…

ipcomp.c

…

ipconfig.c

[NET]: fix-up schedule_timeout() usage

2005-09-12 14:15:34 -07:00

ipip.c

…

ipmr.c

[IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnl

2005-10-03 14:35:55 -07:00

Kconfig

…

Makefile

…

multipath_drr.c

…

multipath_random.c

…

multipath_rr.c

…

multipath_wrandom.c

…

multipath.c

…

netfilter.c

…

proc.c

…

protocol.c

…

raw.c

[PATCH] raw_sendmsg DoS on 2.6

2005-09-19 18:45:42 -07:00

route.c

[IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnl

2005-10-03 14:35:55 -07:00

syncookies.c

…

sysctl_net_ipv4.c

…

tcp_bic.c

[PATCH] tcp: BIC max increment too large

2005-11-10 21:18:55 -08:00

tcp_cong.c

…

tcp_diag.c

…

tcp_highspeed.c

…

tcp_htcp.c

…

tcp_hybla.c

…

tcp_input.c

[TCP]: Clear stale pred_flags when snd_wnd changes

2005-10-27 15:11:04 -02:00

tcp_ipv4.c

[INET]: speedup inet (tcp/dccp) lookups

2005-10-03 14:13:38 -07:00

tcp_minisocks.c

[TCP]: Set default congestion control correctly for incoming connections.

2005-09-21 00:19:46 -07:00

tcp_output.c

[TCP] Allow len == skb->len in tcp_fragment

2005-10-20 17:13:13 -02:00

tcp_scalable.c

…

tcp_timer.c

…

tcp_vegas.c

…

tcp_westwood.c

…

tcp.c

…

udp.c

…

xfrm4_input.c

…

xfrm4_output.c

…

xfrm4_policy.c

…

xfrm4_state.c

…

xfrm4_tunnel.c

…