YOSHIFUJI Hideaki cffa5ffe72 [ATM] CLIP: Do not refer freed skbuff in clip_mkip() (CVE-2006-4997) ...

In clip_mkip(), skb->dev is dereferenced after clip_push(),
which frees up skb.

Advisory: AD_LAB-06009 (<adlab@venustech.com.cn>).

Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Adrian Bunk <bunk@stusta.de>

2006-10-14 01:13:36 +02:00

..

addr.c

…

addr.h

…

atm_misc.c

…

br2684.c

[PATCH] capable/capability.h (net/)

2006-01-11 18:42:14 -08:00

clip.c

[ATM] CLIP: Do not refer freed skbuff in clip_mkip() (CVE-2006-4997)

2006-10-14 01:13:36 +02:00

common.c

…

common.h

…

ioctl.c

[PATCH] capable/capability.h (net/)

2006-01-11 18:42:14 -08:00

ipcommon.c

…

ipcommon.h

…

Kconfig

…

lec_arpc.h

…

lec.c

[PATCH] capable/capability.h (net/)

2006-01-11 18:42:14 -08:00

lec.h

…

Makefile

…

mpc.c

[PATCH] capable/capability.h (net/)

2006-01-11 18:42:14 -08:00

mpc.h

…

mpoa_caches.c

…

mpoa_caches.h

…

mpoa_proc.c

…

pppoatm.c

[PATCH] capable/capability.h (net/)

2006-01-11 18:42:14 -08:00

proc.c

…

protocols.h

…

pvc.c

…

raw.c

[PATCH] capable/capability.h (net/)

2006-01-11 18:42:14 -08:00

resources.c

[PATCH] capable/capability.h (net/)

2006-01-11 18:42:14 -08:00

resources.h

…

signaling.c

[ATM]: keep atmsvc failure messages quiet

2006-03-04 21:06:25 -08:00

signaling.h

…

svc.c

…