Jeremy Sowden a219838783 netfilter: ip6_tables: zero-initialize fragment offset ...

[ Upstream commit 310e2d43c3 ]

ip6tables only sets the `IP6T_F_PROTO` flag on a rule if a protocol is
specified (`-p tcp`, for example).  However, if the flag is not set,
`ip6_packet_match` doesn't call `ipv6_find_hdr` for the skb, in which
case the fragment offset is left uninitialized and a garbage value is
passed to each matcher.

Signed-off-by: Jeremy Sowden <jeremy@azazel.net>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-05-16 12:00:36 +09:00

..

ila

ila_xlat: add missing hash secret initialization

2017-06-24 07:11:12 +02:00

netfilter

netfilter: ip6_tables: zero-initialize fragment offset

2023-05-16 12:00:36 +09:00

addrconf_core.c

net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup

2023-05-15 17:27:12 +09:00

addrconf.c

ipv6: create multicast route with RTPROT_KERNEL

2023-05-16 10:32:53 +09:00

addrlabel.c

ipv6/addrlabel: fix ip6addrlbl_get()

2015-12-22 15:57:54 -05:00

af_inet6.c

net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup

2023-05-15 17:27:12 +09:00

ah6.c

ah6: fix error return code in ah6_input()

2023-05-16 09:48:41 +09:00

anycast.c

ipv6: fix memory leaks on IPV6_ADDRFORM path

2023-05-16 08:45:22 +09:00

calipso.c

netlabel: cope with NULL catmap

2023-05-15 17:27:56 +09:00

datagram.c

net: ipv6: keep sk status consistent after datagram connect failure

2023-05-16 10:00:20 +09:00

esp6.c

esp6: fix memleak on error path in esp6_input

2023-05-15 17:30:54 +09:00

exthdrs_core.c

ANDROID: netfilter: ipv6: fix crash caused by ipv6_find_hdr()

2017-01-19 13:32:22 -08:00

exthdrs_offload.c

ipv6: fix exthdrs offload registration in out_rt path

2015-09-02 15:31:00 -07:00

exthdrs.c

ipv6: make ipv6_renew_options() interrupt/kernel safe

2023-05-12 17:06:19 +09:00

fib6_rules.c

ipv6: Do not leak throw route references

2017-07-05 14:40:16 +02:00

fou6.c

fou: add Kconfig options for IPv6 support

2016-05-29 22:24:21 -07:00

icmp.c

net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending

2023-05-16 10:39:14 +09:00

inet6_connection_sock.c

net: ipv6: add net argument to ip6_dst_lookup_flow

2023-05-15 17:27:11 +09:00

inet6_hashtables.c

tcp/dccp: fix possible race __inet_lookup_established()

2023-05-15 16:21:53 +09:00

ip6_checksum.c

net: udp: fix handling of CHECKSUM_COMPLETE packets

2023-05-15 09:15:00 +09:00

ip6_fib.c

ipv6: Fix route replacement with dev-only route

2023-05-15 17:01:34 +09:00

ip6_flowlabel.c

ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero

2023-05-15 13:49:34 +09:00

ip6_gre.c

ipv6: remove extra dev_hold() for fallback tunnels

2023-05-16 11:05:06 +09:00

ip6_icmp.c

net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending

2023-05-16 10:39:14 +09:00

ip6_input.c

ipv6: weaken the v4mapped source check

2023-05-16 10:49:39 +09:00

ip6_offload.c

gso_segment: Reset skb->mac_len after modifying network header

2023-05-15 08:25:05 +09:00

ip6_offload.h

udp: Add GRO functions to UDP socket

2016-04-07 16:53:29 -04:00

ip6_output.c

net: ipv6: add net argument to ip6_dst_lookup_flow

2023-05-15 17:27:11 +09:00

ip6_tunnel.c

ipv6: remove extra dev_hold() for fallback tunnels

2023-05-16 11:05:06 +09:00

ip6_udp_tunnel.c

ipv6: explicitly initialize udp6_addr in udp_sock_create6()

2023-05-15 10:48:56 +09:00

ip6_vti.c

ipv6: remove extra dev_hold() for fallback tunnels

2023-05-16 11:05:06 +09:00

ip6mr.c

ipv6: check sk sk_type and protocol early in ip_mroute_set/getsockopt

2023-05-15 14:08:35 +09:00

ipcomp6.c

UPSTREAM: net: inet: Support UID-based routing in IP protocols.

2017-01-27 13:55:59 -08:00

ipv6_sockglue.c

ipv6: fix memory leaks on IPV6_ADDRFORM path

2023-05-16 08:45:22 +09:00

Kconfig

fou: fix IPv6 Kconfig options

2016-05-31 14:07:49 -07:00

Makefile

Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next

2016-07-07 10:15:34 +10:00

mcast_snoop.c

net: fix wrong skb_get() usage / crash in IGMP/MLD parsing code

2015-08-13 17:08:39 -07:00

mcast.c

mld: fix panic in mld_newpack()

2023-05-16 11:10:59 +09:00

mip6.c

ipv6: use ktime_t for internal timestamps

2015-10-05 03:16:47 -07:00

ndisc.c

ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called

2023-05-15 09:14:54 +09:00

netfilter.c

UPSTREAM: net: inet: Support UID-based routing in IP protocols.

2017-01-27 13:55:59 -08:00

output_core.c

ipv6: use prandom_u32() for ID generation

2023-05-16 11:25:19 +09:00

ping.c

ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()'

2023-05-15 14:29:23 +09:00

proc.c

inet: frags: break the 2GB limit for frags storage

2023-05-15 09:02:17 +09:00

protocol.c

net: Export inet_offloads and inet6_offloads

2014-09-19 17:15:31 -04:00

raw.c

net: ipv6: add net argument to ip6_dst_lookup_flow

2023-05-15 17:27:11 +09:00

reassembly.c

inet: frags: call inet_frags_fini() after unregister_pernet_subsys()

2023-05-15 16:45:35 +09:00

route.c

net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh

2023-05-16 10:51:30 +09:00

sit.c

ipv6: remove extra dev_hold() for fallback tunnels

2023-05-16 11:05:06 +09:00

syncookies.c

net: Update window_clamp if SOCK_RCVBUF is set

2023-05-16 09:47:49 +09:00

sysctl_net_ipv6.c

calipso: Add a label cache.

2016-06-27 15:06:17 -04:00

tcp_ipv6.c

ipv6: tcp: drop silly ICMPv6 packet too big messages

2023-05-16 11:33:51 +09:00

tcpv6_offload.c

gso: validate gso_type in GSO handlers

2018-01-31 12:55:55 +01:00

tunnel6.c

ipv6: fix tunnel error handling

2015-11-03 10:52:13 -05:00

udp_impl.h

udplite: call proper backlog handlers

2016-11-24 15:32:14 -05:00

udp_offload.c

gso: validate gso_type in GSO handlers

2018-01-31 12:55:55 +01:00

udp.c

net: udp: annotate data race around udp_sk(sk)->corkflag

2023-05-16 11:54:00 +09:00

udplite.c

udplite: call proper backlog handlers

2016-11-24 15:32:14 -05:00

xfrm6_input.c

vti6: fix input path

2016-09-21 10:09:14 +02:00

xfrm6_mode_beet.c

xfrm: simplify xfrm_address_t use

2015-03-31 13:58:35 -04:00

xfrm6_mode_ro.c

ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()

2017-06-14 15:05:51 +02:00

xfrm6_mode_transport.c

ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()

2017-06-14 15:05:51 +02:00

xfrm6_mode_tunnel.c

ipv6: update skb->csum when CE mark is propagated

2016-01-15 15:07:23 -05:00

xfrm6_output.c

net: ipv6: fix return value of ip6_skb_dst_mtu

2023-05-16 11:33:41 +09:00

xfrm6_policy.c

Merge 4.9.110 into android-4.9

2018-06-26 09:32:02 +08:00

xfrm6_protocol.c

xfrm6: Properly handle unsupported protocols

2014-05-06 07:08:38 +02:00

xfrm6_state.c

ipv6: White-space cleansing : Line Layouts

2014-08-24 22:37:52 -07:00

xfrm6_tunnel.c

xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module

2023-05-15 12:53:24 +09:00