TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
v4.14.215
twx-linux/net
T
History
Florian Westphal 1ee314a4ff netfilter: xt_RATEEST: reject non-null terminated string from userspace 
commit 6cb56218ad upstream.

syzbot reports:
detected buffer overflow in strlen
[..]
Call Trace:
 strlen include/linux/string.h:325 [inline]
 strlcpy include/linux/string.h:348 [inline]
 xt_rateest_tg_checkentry+0x2a5/0x6b0 net/netfilter/xt_RATEEST.c:143

strlcpy assumes src is a c-string. Check info->name before its used.

Reported-by: syzbot+e86f7c428c8c50db65b4@syzkaller.appspotmail.com
Fixes: 5859034d7e ("[NETFILTER]: x_tables: add RATEEST target")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-01-12 20:09:14 +01:00
..
6lowpan
…
9p
net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
2020-11-05 11:06:57 +01:00
802
…
8021q
…
appletalk
…
atm
atm: fix a memory leak of vcc->user_back
2020-10-01 13:12:42 +02:00
ax25
AX.25: Prevent integer overflows in connect and sendmsg
2020-07-31 16:44:44 +02:00
batman-adv
batman-adv: set .owner to THIS_MODULE
2020-12-02 08:34:42 +01:00
bluetooth
Bluetooth: Fix null pointer dereference in hci_event_packet()
2020-12-29 13:46:52 +01:00
bpf
…
bridge
net: bridge: vlan: fix error return code in __vlan_add()
2020-12-29 13:46:45 +01:00
caif
…
can
can: af_can: prevent potential access of uninitialized member in canfd_rcv()
2020-11-24 13:05:47 +01:00
ceph
libceph: clear con->out_msg on Policy::stateful_server faults
2020-11-05 11:07:03 +01:00
core
net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc
2021-01-12 20:09:09 +01:00
dcb
…
dccp
net: ipv6: add net argument to ip6_dst_lookup_flow
2020-05-20 08:17:02 +02:00
decnet
…
dns_resolver
KEYS: Don't write out to userspace while holding key semaphore
2020-04-24 08:01:25 +02:00
dsa
net: dsa: Fix duplicate frames flooded by learning
2020-04-02 16:34:24 +02:00
ethernet
…
hsr
hsr: check protocol version in hsr_newlink()
2020-04-24 08:00:52 +02:00
ieee802154
nl802154: add missing attribute validation for dev_type
2020-03-20 10:54:10 +01:00
ife
…
ipv4
ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst()
2021-01-12 20:09:08 +01:00
ipv6
ah6: fix error return code in ah6_input()
2020-11-24 13:05:35 +01:00
ipx
…
iucv
net/af_iucv: set correct sk_protocol for child sockets
2020-12-08 10:17:32 +01:00
kcm
…
key
af_key: pfkey_dump needs parameter validation
2020-10-01 13:12:23 +02:00
l2tp
l2tp: remove skb_dst_set() from l2tp_xmit_skb()
2020-07-22 09:22:19 +02:00
l3mdev
…
lapb
…
llc
llc: make sure applications use ARPHRD_ETHER
2020-07-22 09:22:20 +02:00
mac80211
mac80211: mesh: fix mesh_pathtbl_init() error path
2020-12-29 13:46:45 +01:00
mac802154
mac802154: tx: fix use-after-free
2020-10-01 13:12:50 +02:00
mpls
net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup
2020-05-20 08:17:02 +02:00
ncsi
net/ncsi: Use real net-device for response handler
2021-01-12 20:09:07 +01:00
netfilter
netfilter: xt_RATEEST: reject non-null terminated string from userspace
2021-01-12 20:09:14 +01:00
netlabel
netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist()
2020-11-24 13:05:40 +01:00
netlink
genetlink: remove genl_bind
2020-07-22 09:22:19 +02:00
netrom
net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
2020-05-02 17:24:17 +02:00
nfc
nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download()
2020-10-29 09:06:59 +01:00
nsh
…
openvswitch
openvswitch: handle DNAT tuple collision
2020-10-14 09:51:12 +02:00
packet
net/packet: fix overflow in tpacket_rcv
2020-10-14 09:51:09 +02:00
phonet
…
psample
…
qrtr
net: qrtr: Fix passing invalid reference to qrtr_local_enqueue()
2020-06-03 08:17:38 +02:00
rds
rds: Prevent kernel-infoleak in rds_notify_queue_get()
2020-08-05 10:06:50 +02:00
rfkill
…
rose
rose: Fix Null pointer dereference in rose_send_frame()
2020-12-08 10:17:32 +01:00
rxrpc
rxrpc: Fix server keyring leak
2020-10-14 09:51:14 +02:00
sched
net: sched: prevent invalid Scell_log shift count
2021-01-12 20:09:09 +01:00
sctp
sctp: change to hold/put transport for proto_unreach_timer
2020-11-24 13:05:41 +01:00
smc
net/smc: check for valid ib_client_data
2020-03-20 10:54:20 +01:00
strparser
…
sunrpc
SUNRPC: xprt_load_transport() needs to support the netid "rdma6"
2020-12-29 13:46:57 +01:00
switchdev
…
tipc
tipc: fix use-after-free in tipc_bcast_get_mode
2020-11-10 10:29:02 +01:00
tls
…
unix
skbuff: fix a data race in skb_queue_len()
2020-10-01 13:12:33 +02:00
vmw_vsock
vsock: use ns_capable_noaudit() on socket create
2020-11-10 10:29:05 +01:00
wimax
…
wireless
cfg80211: initialize rekey_data
2020-12-29 13:47:03 +01:00
x25
net/x25: prevent a couple of overflows
2020-12-08 10:17:33 +01:00
xfrm
net: xfrm: fix a race condition during allocing spi
2020-11-18 18:27:53 +01:00
compat.c
net/compat: Add missing sock updates for SCM_RIGHTS
2020-08-21 09:48:18 +02:00
Kconfig
…
Makefile
…
socket.c
net: Set fput_needed iff FDPUT_FPUT is set
2020-08-21 09:48:14 +02:00
sysctl_net.c
…