TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
v4.9.154
twx-linux/net
T
History
Oliver Hartkopp 30e7517e83 can: bcm: check timer values before ktime conversion 
commit 93171ba6f1 upstream.

Kyungtae Kim detected a potential integer overflow in bcm_[rx|tx]_setup()
when the conversion into ktime multiplies the given value with NSEC_PER_USEC
(1000).

Reference: https://marc.info/?l=linux-can&m=154732118819828&w=2

Add a check for the given tv_usec, so that the value stays below one second.
Additionally limit the tv_sec value to a reasonable value for CAN related
use-cases of 400 days and ensure all values to be positive.

Reported-by: Kyungtae Kim <kt0755@gmail.com>
Tested-by: Oliver Hartkopp <socketcan@hartkopp.net>
Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net>
Cc: linux-stable <stable@vger.kernel.org> # >= 2.6.26
Tested-by: Kyungtae Kim <kt0755@gmail.com>
Acked-by: Andre Naujoks <nautsch2@gmail.com>
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-01-31 08:12:36 +01:00
..
6lowpan
…
9p
9p/net: put a lower bound on msize
2019-01-13 10:03:52 +01:00
802
…
8021q
…
appletalk
…
atm
…
ax25
ax25: fix a use-after-free in ax25_fillin_cb()
2019-01-09 16:16:39 +01:00
batman-adv
batman-adv: Expand merged fragment buffer for full packet
2018-12-13 09:20:25 +01:00
bluetooth
Bluetooth: SMP: fix crash in unpairing
2018-11-10 07:42:42 -08:00
bridge
net: Fix usage of pskb_trim_rcsum
2019-01-31 08:12:33 +01:00
caif
…
can
can: bcm: check timer values before ktime conversion
2019-01-31 08:12:36 +01:00
ceph
libceph: fix CEPH_FEATURE_CEPHX_V2 check in calc_signature()
2019-01-13 10:03:50 +01:00
core
net: call sk_dst_reset when set SO_DONTROUTE
2019-01-26 09:38:34 +01:00
dcb
…
dccp
…
decnet
…
dns_resolver
…
dsa
…
ethernet
…
hsr
…
ieee802154
ieee802154: lowpan_header_create check must check daddr
2019-01-09 16:16:40 +01:00
ipv4
ipfrag: really prevent allocation on netns exit
2019-01-31 08:12:33 +01:00
ipv6
ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses
2019-01-26 09:38:32 +01:00
ipx
…
irda
…
iucv
…
kcm
…
key
…
l2tp
l2tp: remove configurable payload offset
2018-11-10 07:42:54 -08:00
l3mdev
…
lapb
…
llc
llc: do not use sk_eat_skb()
2018-12-01 09:44:19 +01:00
mac80211
mac80211: Fix condition validating WMM IE
2018-12-21 14:11:32 +01:00
mac802154
…
mpls
…
ncsi
…
netfilter
netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel
2019-01-13 10:03:48 +01:00
netlabel
…
netlink
…
netrom
netrom: fix locking in nr_find_socket()
2019-01-09 16:16:40 +01:00
nfc
…
openvswitch
openvswitch: Avoid OOB read when parsing flow nlattrs
2019-01-31 08:12:33 +01:00
packet
packet: Do not leak dev refcounts on error exit
2019-01-23 08:10:54 +01:00
phonet
…
qrtr
…
rds
rds: ib: Fix missing call to rds_ib_dev_put in rds_ib_setup_qp
2018-11-10 07:42:50 -08:00
rfkill
…
rose
…
rxrpc
rxrpc: Only take the rwind and mtu values from latest ACK
2018-11-10 07:42:56 -08:00
sched
net_sched: refetch skb protocol for each filter
2019-01-31 08:12:33 +01:00
sctp
sctp: allocate sctp_sockaddr_entry with kzalloc
2019-01-23 08:10:56 +01:00
strparser
…
sunrpc
sunrpc: handle ENOMEM in rpcb_getport_async
2019-01-23 08:10:55 +01:00
switchdev
…
tipc
tipc: fix uninit-value in tipc_nl_compat_doit
2019-01-23 08:10:56 +01:00
unix
…
vmw_vsock
VSOCK: Send reset control packet when socket is partially bound
2019-01-09 16:16:41 +01:00
wimax
…
wireless
nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT
2018-11-10 07:42:42 -08:00
x25
…
xfrm
xfrm: Fix bucket count reported to userspace
2019-01-13 10:03:48 +01:00
compat.c
sock: Make sock->sk_stamp thread-safe
2019-01-09 16:16:41 +01:00
Kconfig
…
Makefile
…
socket.c
net: socket: fix a missing-check bug
2018-11-10 07:42:58 -08:00
sysctl_net.c
…