Pablo Neira Ayuso b15b35c649 netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code ...

commit 4c559f15ef upstream.

Dan Carpenter says: "Smatch complains that the value for "cmd" comes
from the network and can't be trusted."

Add pptp_msg_name() helper function that checks for the array boundary.

Fixes: f09943fefe ("[NETFILTER]: nf_conntrack/nf_nat: add PPTP helper port")
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2020-06-03 08:18:09 +02:00

..

netfilter

netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code

2020-06-03 08:18:09 +02:00

af_inet.c

…

ah4.c

…

arp.c

…

cipso_ipv4.c

netlabel: cope with NULL catmap

2020-05-20 08:17:12 +02:00

datagram.c

inet: stop leaking jiffies on the wire

2019-11-10 11:25:37 +01:00

devinet.c

net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin

2020-04-24 08:00:52 +02:00

esp4_offload.c

…

esp4.c

esp4: add length check for UDP encapsulation

2019-05-25 18:25:34 +02:00

fib_frontend.c

ipv4: Return error for RTA_VIA attribute

2019-03-13 14:03:09 -07:00

fib_lookup.h

…

fib_notifier.c

…

fib_rules.c

…

fib_semantics.c

ipv4: Fix table id reference in fib_sync_down_addr

2019-11-12 19:17:49 +01:00

fib_trie.c

ipv4: fix a RCU-list lock in fib_triestat_seq_show

2020-04-13 10:34:14 +02:00

fou.c

net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv

2019-04-27 09:35:34 +02:00

gre_demux.c

gre: fix uninit-value in __iptunnel_pull_header

2020-03-20 10:54:07 +01:00

gre_offload.c

…

icmp.c

net: icmp: fix data-race in cmp_global_allow()

2020-01-04 14:00:08 +01:00

igmp.c

igmp: fix memory leak in igmpv3_del_delrec()

2019-07-31 07:28:44 +02:00

inet_connection_sock.c

net: memcg: fix lockdep splat in inet_csk_accept()

2020-03-20 10:54:09 +01:00

inet_diag.c

inet_diag: return classid for all socket types

2020-03-20 10:54:13 +01:00

inet_fragment.c

net: IP defrag: encapsulate rbtree defrag code into callable functions

2019-04-27 09:35:40 +02:00

inet_hashtables.c

tcp/dccp: fix possible race __inet_lookup_established()

2020-01-04 14:00:19 +01:00

inet_timewait_sock.c

…

inetpeer.c

inetpeer: fix data-race in inet_putpeer / inet_putpeer

2020-01-04 14:00:07 +01:00

ip_forward.c

…

ip_fragment.c

net: IP defrag: encapsulate rbtree defrag code into callable functions

2019-04-27 09:35:40 +02:00

ip_gre.c

ip_gre: fix parsing gre header in ipgre_err

2019-11-20 18:00:02 +01:00

ip_input.c

vrf: check accept_source_route on the original netdevice

2019-04-17 08:37:48 +02:00

ip_options.c

vrf: check accept_source_route on the original netdevice

2019-04-17 08:37:48 +02:00

ip_output.c

inet: protect against too small mtu values.

2019-12-21 10:47:38 +01:00

ip_sockglue.c

…

ip_tunnel_core.c

ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL

2019-08-04 09:32:03 +02:00

ip_tunnel.c

net, ip_tunnel: fix interface lookup with no key

2020-04-13 10:34:14 +02:00

ip_vti.c

ip_vti: receive ipip packet by calling ip_tunnel_rcv

2020-06-03 08:18:08 +02:00

ipcomp.c

…

ipconfig.c

…

ipip.c

net: ipip: fix wrong address family in init error path

2020-06-03 08:17:31 +02:00

ipmr.c

…

Kconfig

vti[6]: fix packet tx through bpf_redirect() in XinY cases

2020-04-02 16:34:32 +02:00

Makefile

…

netfilter.c

…

ping.c

…

proc.c

tcp: tcp_fragment() should apply sane memory limits

2019-06-17 19:52:44 +02:00

protocol.c

…

raw_diag.c

inet_diag: return classid for all socket types

2020-03-20 10:54:13 +01:00

raw.c

net: ipv4: emulate READ_ONCE() on ->hdrincl bit-field in raw_sendmsg()

2020-05-02 17:24:11 +02:00

route.c

net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()"

2020-06-03 08:17:33 +02:00

syncookies.c

tcp: handle inet_csk_reqsk_queue_add() failures

2019-03-19 13:13:23 +01:00

sysctl_net_ipv4.c

tcp: add tcp_min_snd_mss sysctl

2019-06-17 19:52:44 +02:00

tcp_bbr.c

tcp_bbr: improve arithmetic division in bbr_update_bw()

2020-01-29 15:02:36 +01:00

tcp_bic.c

…

tcp_cdg.c

…

tcp_cong.c

tcp: fix tcp_set_congestion_control() use from bpf hook

2019-07-31 07:28:46 +02:00

tcp_cubic.c

…

tcp_dctcp.c

tcp: Ensure DCTCP reacts to losses

2019-04-17 08:37:47 +02:00

tcp_diag.c

…

tcp_fastopen.c

…

tcp_highspeed.c

…

tcp_htcp.c

…

tcp_hybla.c

…

tcp_illinois.c

…

tcp_input.c

tcp: fix marked lost packets not being retransmitted

2020-01-23 08:20:35 +01:00

tcp_ipv4.c

tcp/dccp: fix possible race __inet_lookup_established()

2020-01-04 14:00:19 +01:00

tcp_lp.c

…

tcp_metrics.c

…

tcp_minisocks.c

…

tcp_nv.c

…

tcp_offload.c

…

tcp_output.c

tcp: do not send empty skb from tcp_write_xmit()

2020-01-04 14:00:20 +01:00

tcp_probe.c

…

tcp_rate.c

…

tcp_recovery.c

…

tcp_scalable.c

…

tcp_timer.c

tcp: exit if nothing to retransmit on RTO timeout

2019-12-17 20:38:43 +01:00

tcp_ulp.c

…

tcp_vegas.c

…

tcp_vegas.h

…

tcp_veno.c

…

tcp_westwood.c

…

tcp_yeah.c

…

tcp.c

net: tcp: fix rx timestamp behavior for tcp_recvmsg

2020-05-20 08:17:14 +02:00

tunnel4.c

…

udp_diag.c

inet_diag: return classid for all socket types

2020-03-20 10:54:13 +01:00

udp_impl.h

…

udp_offload.c

…

udp_tunnel.c

…

udp.c

udp: fix integer overflow while computing available space in sk_rcvbuf

2020-01-04 14:00:13 +01:00

udplite.c

…

xfrm4_input.c

…

xfrm4_mode_beet.c

…

xfrm4_mode_transport.c

…

xfrm4_mode_tunnel.c

…

xfrm4_output.c

xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish

2020-05-02 17:24:18 +02:00

xfrm4_policy.c

net: add bool confirm_neigh parameter for dst_ops.update_pmtu

2020-01-04 14:00:14 +01:00

xfrm4_protocol.c

…

xfrm4_state.c

…

xfrm4_tunnel.c

…