Willem de Bruijn 671cf50f4c net: test tailroom before appending to linear skb ...

[ Upstream commit 113f99c335 ]

Device features may change during transmission. In particular with
corking, a device may toggle scatter-gather in between allocating
and writing to an skb.

Do not unconditionally assume that !NETIF_F_SG at write time implies
that the same held at alloc time and thus the skb has sufficient
tailroom.

This issue predates git history.

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Reported-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Willem de Bruijn <willemb@google.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-05-26 08:48:57 +02:00

..

netfilter

netfilter: x_tables: pack percpu counter allocations

2018-03-18 11:17:52 +01:00

addrconf_core.c

…

addrconf.c

ipv6: avoid dad-failures for addresses with NODAD

2018-04-13 19:50:06 +02:00

addrlabel.c

…

af_inet6.c

net: reevalulate autoflowlabel setting after sysctl setting

2018-01-02 20:33:25 +01:00

ah6.c

ipsec: check return value of skb_to_sgvec always

2018-04-13 19:50:23 +02:00

anycast.c

…

datagram.c

ipv6: Handle IPv4-mapped src to in6addr_any dst.

2017-06-17 06:39:35 +02:00

esp6.c

ipsec: check return value of skb_to_sgvec always

2018-04-13 19:50:23 +02:00

exthdrs_core.c

…

exthdrs_offload.c

…

exthdrs.c

…

fib6_rules.c

ipv6: Do not leak throw route references

2017-07-05 14:37:14 +02:00

icmp.c

…

ila.c

…

inet6_connection_sock.c

…

inet6_hashtables.c

…

ip6_checksum.c

udplite: fix partial checksum initialization

2018-03-11 16:19:46 +01:00

ip6_fib.c

ipv6: fix typo in fib6_net_exit()

2017-09-27 11:00:12 +02:00

ip6_flowlabel.c

ipv6: flowlabel: do not leave opt->tot_len with garbage

2017-11-18 11:11:06 +01:00

ip6_gre.c

ip6_gre: better validate user provided tunnel names

2018-04-13 19:50:26 +02:00

ip6_icmp.c

…

ip6_input.c

…

ip6_offload.c

ipv6: Fix leak in ipv6_gso_segment().

2017-06-14 13:16:19 +02:00

ip6_offload.h

…

ip6_output.c

net: test tailroom before appending to linear skb

2018-05-26 08:48:57 +02:00

ip6_tunnel.c

ip6_tunnel: better validate user provided tunnel names

2018-04-13 19:50:27 +02:00

ip6_udp_tunnel.c

…

ip6_vti.c

vti6: better validate user provided tunnel names

2018-04-13 19:50:27 +02:00

ip6mr.c

ip6mr: fix stale iterator

2018-02-16 20:09:37 +01:00

ipcomp6.c

…

ipv6_sockglue.c

netfilter: drop outermost socket lock in getsockopt()

2018-02-28 10:17:21 +01:00

Kconfig

net: replace dst_cache ip6_tunnel implementation with the generic one

2018-02-25 11:03:34 +01:00

Makefile

…

mcast_snoop.c

…

mcast.c

ipv6: mcast: better catch silly mtu values

2018-01-02 20:33:24 +01:00

mip6.c

…

ndisc.c

ipv6: fix access to non-linear packet in ndisc_fill_redirect_hdr_option()

2018-03-31 18:12:33 +02:00

netfilter.c

…

output_core.c

ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()

2017-09-27 11:00:10 +02:00

ping.c

net: ping: do not abuse udp_poll()

2017-06-14 13:16:19 +02:00

proc.c

…

protocol.c

…

raw.c

net: ping: do not abuse udp_poll()

2017-06-14 13:16:19 +02:00

reassembly.c

Revert "net: fix percpu memory leaks"

2017-09-27 11:00:11 +02:00

route.c

ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy

2018-04-29 07:50:06 +02:00

sit.c

ipv6: sit: better validate user provided tunnel names

2018-04-13 19:50:26 +02:00

syncookies.c

ipv4: ipv6: initialize treq->txhash in cookie_v[46]_check()

2017-08-11 09:08:51 -07:00

sysctl_net_ipv6.c

…

tcp_ipv6.c

tcp md5sig: Use skb's saddr when replying to an incoming segment

2018-01-02 20:33:25 +01:00

tcpv6_offload.c

…

tunnel6.c

…

udp_impl.h

…

udp_offload.c

net: avoid skb_warn_bad_offload false positives on UFO

2017-08-12 19:29:08 -07:00

udp.c

udpv6: Fix the checksum computation when HW checksum does not apply

2017-10-21 17:09:02 +02:00

udplite.c

…

xfrm6_input.c

…

xfrm6_mode_beet.c

…

xfrm6_mode_ro.c

ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()

2017-06-14 13:16:19 +02:00

xfrm6_mode_transport.c

ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()

2017-06-14 13:16:19 +02:00

xfrm6_mode_tunnel.c

…

xfrm6_output.c

…

xfrm6_policy.c

…

xfrm6_protocol.c

…

xfrm6_state.c

…

xfrm6_tunnel.c

…