Florian Westphal 5bcf169444 netfilter: x_tables: limit allocation requests for blob rule heads ...

commit 9d5c12a7c0 upstream.

This is a very conservative limit (134217728 rules), but good
enough to not trigger frequent oom from syzkaller.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-04-26 11:02:21 +02:00

..

6lowpan

…

9p

…

802

…

8021q

vlan: also check phy_driver ts_info for vlan's real device

2018-04-12 12:32:24 +02:00

appletalk

…

atm

…

ax25

…

batman-adv

…

bluetooth

Bluetooth: Fix connection if directed advertising and privacy is used

2018-04-19 08:56:19 +02:00

bpf

…

bridge

netfilter: compat: prepare xt_compat_init_offsets to return errors

2018-04-26 11:02:21 +02:00

caif

…

can

…

ceph

…

core

net: fool proof dev_valid_name()

2018-04-12 12:32:25 +02:00

dcb

…

dccp

dccp: check sk for closed state in dccp_sendmsg()

2018-03-31 18:10:40 +02:00

decnet

…

dns_resolver

…

dsa

net: dsa: Discard frames from unused ports

2018-04-24 09:36:39 +02:00

ethernet

…

hsr

…

ieee802154

ieee802154: 6lowpan: fix possible NULL deref in lowpan_device_event()

2018-03-31 18:10:40 +02:00

ife

…

ipv4

netfilter: compat: prepare xt_compat_init_offsets to return errors

2018-04-26 11:02:21 +02:00

ipv6

netfilter: compat: prepare xt_compat_init_offsets to return errors

2018-04-26 11:02:21 +02:00

ipx

…

iucv

net/iucv: Free memory obtained by kzalloc

2018-03-31 18:10:41 +02:00

kcm

kcm: lock lower socket in kcm_attach

2018-03-31 18:10:40 +02:00

key

…

l2tp

l2tp: fix missing print session offset info

2018-04-12 12:32:12 +02:00

l3mdev

…

lapb

…

llc

…

mac80211

mac80211: Fix setting TX power on monitor interfaces

2018-04-12 12:32:15 +02:00

mac802154

…

mpls

…

ncsi

…

netfilter

netfilter: x_tables: limit allocation requests for blob rule heads

2018-04-26 11:02:21 +02:00

netlabel

…

netlink

netlink: make sure nladdr has correct size in netlink_connect()

2018-04-12 12:32:23 +02:00

netrom

…

nfc

…

nsh

…

openvswitch

openvswitch: Remove padding from packet before L3+ conntrack processing

2018-04-26 11:02:15 +02:00

packet

…

phonet

…

psample

…

qrtr

…

rds

RDS: IB: Fix null pointer issue

2018-04-26 11:02:17 +02:00

rfkill

…

rose

…

rxrpc

rxrpc: Don't put crypto buffers on the stack

2018-04-26 11:02:19 +02:00

sched

net/sched: fix NULL dereference on the error path of tcf_skbmod_init()

2018-04-12 12:32:26 +02:00

sctp

sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6

2018-04-12 12:32:24 +02:00

smc

net/smc: fix NULL pointer dereference on sock_create_kern() error path

2018-03-15 10:54:28 +01:00

strparser

strparser: Fix sign of err codes

2018-04-12 12:32:26 +02:00

sunrpc

SUNRPC: Don't call __UDPX_INC_STATS() from a preemptible context

2018-04-26 11:02:19 +02:00

switchdev

…

tipc

…

tls

…

unix

…

vmw_vsock

…

wimax

…

wireless

…

x25

…

xfrm

xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems

2018-04-08 14:26:29 +02:00

compat.c

…

Kconfig

…

Makefile

…

socket.c

…

sysctl_net.c

…