Dan Carpenter 0232de1d3d AX.25: Prevent integer overflows in connect and sendmsg ...

[ Upstream commit 17ad73e941 ]

We recently added some bounds checking in ax25_connect() and
ax25_sendmsg() and we so we removed the AX25_MAX_DIGIS checks because
they were no longer required.

Unfortunately, I believe they are required to prevent integer overflows
so I have added them back.

Fixes: 8885bb0621 ("AX.25: Prevent out-of-bounds read in ax25_sendmsg()")
Fixes: 2f2a7ffad5 ("AX.25: Fix out-of-bounds read in ax25_connect()")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-16 08:39:01 +09:00

..

af_ax25.c

AX.25: Prevent integer overflows in connect and sendmsg

2023-05-16 08:39:01 +09:00

ax25_addr.c

small cleanup in ax25_addr_parse()

2012-07-09 00:16:16 -07:00

ax25_dev.c

ax25: fix a use-after-free in ax25_fillin_cb()

2023-05-15 10:48:52 +09:00

ax25_ds_in.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

ax25_ds_subr.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

ax25_ds_timer.c

AX.25: Close socket connection on session completion

2016-06-18 20:55:34 -07:00

ax25_iface.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

ax25_in.c

ax25: Stop using sock->sk_protinfo.

2015-06-28 16:55:44 -07:00

ax25_ip.c

ax25: fix possible use-after-free

2023-05-15 11:43:44 +09:00

ax25_out.c

netfilter: Remove spurios included of netfilter.h

2015-06-18 21:14:32 +02:00

ax25_route.c

ax25: fix inconsistent lock state in ax25_destroy_timer

2023-05-15 13:49:27 +09:00

ax25_std_in.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

ax25_std_subr.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

ax25_std_timer.c

AX.25: Close socket connection on session completion

2016-06-18 20:55:34 -07:00

ax25_subr.c

ax25: Fix segfault after sock connection timeout

2017-02-04 09:47:09 +01:00

ax25_timer.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

ax25_uid.c

netfilter: Remove spurios included of netfilter.h

2015-06-18 21:14:32 +02:00

Kconfig

Update broken web addresses in the kernel.

2010-10-18 11:03:14 +02:00

Makefile

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

sysctl_net_ax25.c

net: Convert uses of typedef ctl_table to struct ctl_table

2013-06-13 02:36:09 -07:00

TODO

[AX25]: Remove obsolete references to BKL from TODO file.

2008-03-26 02:14:38 -07:00