You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Paolo Abeni 63c3b128b2 udp: fix jump label misuse ... The commit 60fb9567bf30 ("udp: implement complete book-keeping for encap_needed") introduced a severe misuse of jump label APIs, which syzbot, as reported by Eric, was able to exploit. When multiple sockets/process can concurrently request (and than disable) the udp encap, we need to track the activation counter with *_inc()/*_dec() jump label variants, or we can experience bad things at disable time. Change-Id: Ic0063bfd1e0800aa0ce8c18490fb3e6ec2f27981 CRs-Fixed: 2351793 Fixes: 60fb9567bf30 ("udp: implement complete book-keeping for encap_needed") Reported-by: Eric Dumazet <eric.dumazet@gmail.com> Signed-off-by: Paolo Abeni <pabeni@redhat.com> Patch-mainline: netdev @ Nov. 15, 2018, 1:34 a.m. Signed-off-by: Sean Tranchetti <stranche@codeaurora.org>		6 years ago
..
ila	…
netfilter	Revert "ipv6: defrag: drop non-last frags smaller than min mtu"	6 years ago
Kconfig	ipv6: ila: select CONFIG_DST_CACHE	7 years ago
Makefile	…
addrconf.c	Merge android-4.14-p.77 (c2214bc) into msm-4.14	6 years ago
addrconf_core.c	…
addrlabel.c	…
af_inet6.c	…
ah6.c	…
anycast.c	…
calipso.c	ipv6: make ipv6_renew_options() interrupt/kernel safe	7 years ago
datagram.c	Merge android-4.14-p.61 (b7e55e8) into msm-4.14	7 years ago
esp6.c	esp6: fix memleak on error path in esp6_input	7 years ago
esp6_offload.c	…
exthdrs.c	ipv6: make ipv6_renew_options() interrupt/kernel safe	7 years ago
exthdrs_core.c	…
exthdrs_offload.c	…
fib6_notifier.c	…
fib6_rules.c	…
fou6.c	…
icmp.c	net/ipv6: Fix linklocal to global address with VRF	7 years ago
inet6_connection_sock.c	…
inet6_hashtables.c	net/tcp: Fix socket lookups with SO_BINDTODEVICE	7 years ago
ip6_checksum.c	net: udp: fix handling of CHECKSUM_COMPLETE packets	6 years ago
ip6_fib.c	…
ip6_flowlabel.c	…
ip6_gre.c	…
ip6_icmp.c	…
ip6_input.c	ipv6: factor out protocol delivery helper	6 years ago
ip6_offload.c	Merge android-4.14-p.73 (6cff87be) into msm-4.14	6 years ago
ip6_offload.h	…
ip6_output.c	ipv6: remove min MTU check for ipsec tunnels	6 years ago
ip6_tunnel.c	ip6_tunnel: be careful when accessing the inner header	6 years ago
ip6_udp_tunnel.c	…
ip6_vti.c	vti6: remove !skb->ignore_df check from vti6_xmit()	6 years ago
ip6mr.c	…
ipcomp6.c	…
ipv6_sockglue.c	ipv6: make ipv6_renew_options() interrupt/kernel safe	7 years ago
mcast.c	ipv6: mcast: fix unsolicited report interval after receiving querys	7 years ago
mcast_snoop.c	…
mip6.c	…
ndisc.c	ipv6: make DAD fail with enhanced DAD when nonce length differs	7 years ago
netfilter.c	…
output_core.c	…
ping.c	…
proc.c	inet: frags: break the 2GB limit for frags storage	6 years ago
protocol.c	…
raw.c	ipv6: take rcu lock in rawv6_send_hdrinc()	6 years ago
reassembly.c	Revert "ipv6: defrag: drop non-last frags smaller than min mtu"	6 years ago
route.c	This is the 4.14.72 stable release	6 years ago
seg6.c	…
seg6_hmac.c	ipv6: sr: fix passing wrong flags to crypto_alloc_shash()	7 years ago
seg6_iptunnel.c	ipv6: sr: fix memory OOB access in seg6_do_srh_encap/inline	7 years ago
seg6_local.c	…
sit.c	…
syncookies.c	…
sysctl_net_ipv6.c	…
tcp_ipv6.c	Merge android-4.14-p.61 (b7e55e8) into msm-4.14	7 years ago
tcpv6_offload.c	…
tunnel6.c	…
udp.c	udp: fix jump label misuse	6 years ago
udp_impl.h	…
udp_offload.c	udp: implement GRO for plain UDP sockets.	6 years ago
udplite.c	…
xfrm6_input.c	…
xfrm6_mode_beet.c	…
xfrm6_mode_ro.c	…
xfrm6_mode_transport.c	…
xfrm6_mode_tunnel.c	…
xfrm6_output.c	…
xfrm6_policy.c	xfrm6: avoid potential infinite loop in _decode_session6()	7 years ago
xfrm6_protocol.c	…
xfrm6_state.c	…
xfrm6_tunnel.c	…