Jozsef Kadlecsik 5515c5bd3f netfilter: ipset: Fix wraparound in hash:*net* types ...

[ Upstream commit 0b8d907353 ]

Fix wraparound bug which could lead to memory exhaustion when adding an
x.x.x.x-255.255.255.255 range to any hash:*net* types.

Fixes Netfilter's bugzilla id #1212, reported by Thomas Schwark.

Fixes: 48596a8ddc ("netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses")
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2018-12-21 14:13:10 +01:00

..

ip_set_bitmap_gen.h

netfilter: Remove unnecessary cast on void pointer

2017-04-07 17:29:17 +02:00

ip_set_bitmap_ip.c

netfilter: ipset: Fix extension alignment

2015-11-07 11:21:47 +01:00

ip_set_bitmap_ipmac.c

netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length

2016-03-08 20:36:17 +01:00

ip_set_bitmap_port.c

netfilter: ipset: Fix extension alignment

2015-11-07 11:21:47 +01:00

ip_set_core.c

netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace

2018-11-27 16:10:48 +01:00

ip_set_getport.c

sctp: remove the typedef sctp_sctphdr_t

2017-07-01 09:08:41 -07:00

ip_set_hash_gen.h

netfilter: ipset: forbid family for hash:mac sets

2018-08-03 07:50:23 +02:00

ip_set_hash_ip.c

netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses

2017-09-26 20:15:04 +02:00

ip_set_hash_ipmac.c

netfilter: ipset: hash: fix boolreturn.cocci warnings

2016-11-10 13:28:50 +01:00

ip_set_hash_ipmark.c

netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses

2017-09-26 20:15:04 +02:00

ip_set_hash_ipport.c

netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses

2017-09-26 20:15:04 +02:00

ip_set_hash_ipportip.c

netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses

2017-09-26 20:15:04 +02:00

ip_set_hash_ipportnet.c

netfilter: ipset: Fix wraparound in hash:*net* types

2018-12-21 14:13:10 +01:00

ip_set_hash_mac.c

netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute length

2016-03-08 20:36:17 +01:00

ip_set_hash_net.c

netfilter: ipset: Fix wraparound in hash:*net* types

2018-12-21 14:13:10 +01:00

ip_set_hash_netiface.c

netfilter: ipset: Fix wraparound in hash:*net* types

2018-12-21 14:13:10 +01:00

ip_set_hash_netnet.c

netfilter: ipset: Fix wraparound in hash:*net* types

2018-12-21 14:13:10 +01:00

ip_set_hash_netport.c

netfilter: ipset: Fix wraparound in hash:*net* types

2018-12-21 14:13:10 +01:00

ip_set_hash_netportnet.c

netfilter: ipset: Fix wraparound in hash:*net* types

2018-12-21 14:13:10 +01:00

ip_set_list_set.c

netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace

2018-11-27 16:10:48 +01:00

Kconfig

netfilter: ipset: hash:ipmac type support added to ipset

2016-11-10 13:28:49 +01:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

pfxlen.c

netfilter: ipset: Fix coding styles reported by checkpatch.pl

2015-06-14 10:40:18 +02:00