Paolo Abeni e94e50bd88 net: fix possible user-after-free in skb_ext_add() ... On cow we can free the old extension: we must avoid dereferencing such extension after skb_ext_maybe_cow(). Since 'new' contents are always equal to 'old' after the copy, we can fix the above accessing the relevant data using 'new'. Fixes: df5042f4c5 ("sk_buff: add skb extension infrastructure") Signed-off-by: Paolo Abeni <pabeni@redhat.com> Acked-by: Florian Westphal <fw@strlen.de> Signed-off-by: David S. Miller <davem@davemloft.net>		2018-12-21 10:24:54 -08:00
..
datagram.c	net: dump more useful information in netdev_rx_csum_fault()	2018-11-15 11:37:04 -08:00
dev.c	net: use indirect call wrappers at GRO network layer	2018-12-15 13:23:02 -08:00
dev_addr_lists.c	net: dev: Issue NETDEV_PRE_CHANGEADDR	2018-12-13 18:41:38 -08:00
dev_ioctl.c	net: dev: Add extack argument to dev_set_mac_address()	2018-12-13 18:41:38 -08:00
devlink.c	devlink: Add 'fw_load_policy' generic parameter	2018-12-03 13:55:43 -08:00
drop_monitor.c
dst.c
dst_cache.c
ethtool.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2018-10-19 11:03:06 -07:00
failover.c
fib_notifier.c
fib_rules.c	net/fib_rules: Update fib_nl_dumprule for strict data checking	2018-10-08 10:39:05 -07:00
filter.c	bpf: skmsg, replace comments with BUILD bug	2018-12-20 23:47:09 +01:00
flow_dissector.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2018-12-20 11:53:36 -08:00
gen_estimator.c
gen_stats.c	net/core: make function ___gnet_stats_copy_basic() static	2018-09-28 10:25:11 -07:00
gro_cells.c	gro_cell: add napi_disable in gro_cells_destroy	2018-12-19 15:50:02 -08:00
hwbm.c
link_watch.c	net: linkwatch: add check for netdevice being present to linkwatch_do_dev	2018-09-19 21:06:46 -07:00
lwt_bpf.c
lwtunnel.c
Makefile	bpf, sockmap: convert to generic sk_msg interface	2018-10-15 12:23:19 -07:00
neighbour.c	neighbour: remove stray semicolon	2018-12-20 16:36:28 -08:00
net-procfs.c
net-sysfs.c	net: core: dev: Add extack argument to dev_change_flags()	2018-12-06 13:26:07 -08:00
net-sysfs.h
net-traces.c
net_namespace.c	netns: enable to dump full nsid translation table	2018-11-27 16:20:20 -08:00
netclassid_cgroup.c	cgroup, netclassid: add a preemption point to write_classid	2018-10-23 12:58:17 -07:00
netevent.c
netpoll.c	net: core: dev: Add extack argument to dev_open()	2018-12-06 13:26:06 -08:00
netprio_cgroup.c
page_pool.c
pktgen.c	pktgen: Fix fall-through annotation	2018-09-13 15:36:41 -07:00
ptp_classifier.c
request_sock.c
rtnetlink.c	neighbour: register rtnl doit handler	2018-12-19 13:37:34 -08:00
scm.c
secure_seq.c
skbuff.c	net: fix possible user-after-free in skb_ext_add()	2018-12-21 10:24:54 -08:00
skmsg.c	bpf: sk_msg, zap ingress queue on psock down	2018-12-20 23:47:09 +01:00
sock.c	net: call sk_dst_reset when set SO_DONTROUTE	2018-12-07 16:11:54 -08:00
sock_diag.c
sock_map.c	bpf: skmsg, fix psock create on existing kcm/tls port	2018-10-20 00:40:45 +02:00
sock_reuseport.c	sctp: add sock_reuseport for the sock in __sctp_hash_endpoint	2018-11-12 09:09:51 -08:00
stream.c	tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT	2018-12-04 21:21:18 -08:00
sysctl_net_core.c	bpf: fix bpf_jit_limit knob for PAGE_SIZE >= 64K	2018-12-11 19:12:21 -08:00
timestamping.c
tso.c
utils.c
xdp.c