David Miller ad8ca99ca2 [PATCH] TOKENRING: Remote memory corruptor in ibmtr.c ...

ip_summed changes last summer had missed that one.  As the result,
we have ip_summed interpreted as CHECKSUM_PARTIAL now.  IOW,
->csum is interpreted as offset of checksum in the packet.  net/core/*
will both read and modify the value as that offset, with obvious
reasons.  At the very least it's a remote memory corruptor.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>

2006-12-11 11:32:39 -08:00

..

3c359_microcode.h

…

3c359.c

IRQ: Maintain regs pointer globally rather than passing to IRQ handlers

2006-10-05 15:10:12 +01:00

3c359.h

…

abyss.c

…

abyss.h

…

ibmtr.c

[PATCH] TOKENRING: Remote memory corruptor in ibmtr.c

2006-12-11 11:32:39 -08:00

Kconfig

…

lanstreamer.c

IRQ: Maintain regs pointer globally rather than passing to IRQ handlers

2006-10-05 15:10:12 +01:00

lanstreamer.h

…

madgemc.c

IRQ: Maintain regs pointer globally rather than passing to IRQ handlers

2006-10-05 15:10:12 +01:00

madgemc.h

…

Makefile

…

olympic.c

IRQ: Maintain regs pointer globally rather than passing to IRQ handlers

2006-10-05 15:10:12 +01:00

olympic.h

…

proteon.c

[PATCH] tokenring: fix module_init error handling

2006-10-31 20:22:05 -05:00

skisa.c

[PATCH] tokenring: fix module_init error handling

2006-10-31 20:22:05 -05:00

smctr_firmware.h

…

smctr.c

drivers/net: eliminate irq handler impossible checks, needless casts

2006-10-06 14:56:04 -04:00

smctr.h

…

tms380tr.c

drivers/net: eliminate irq handler impossible checks, needless casts

2006-10-06 14:56:04 -04:00

tms380tr.h

IRQ: Maintain regs pointer globally rather than passing to IRQ handlers

2006-10-05 15:10:12 +01:00

tmspci.c

…