Steffen Klassert dffe655ddb xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems ...

commit 19d7df69fd upstream.

We don't have a compat layer for xfrm, so userspace and kernel
structures have different sizes in this case. This results in
a broken configuration, so refuse to configure socket policies
when trying to insert from 32 bit userspace as we do it already
with policies inserted via netlink.

Reported-and-tested-by: syzbot+e1a1577ca8bcb47b769a@syzkaller.appspotmail.com
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-04-08 14:26:29 +02:00

..

Kconfig

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next

2017-02-16 21:25:49 -05:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm_algo.c

xfrm: use IS_ENABLED() instead of checking for built-in or module

2016-09-10 21:19:11 -07:00

xfrm_device.c

xfrm: Fix negative device refcount on offload failure.

2017-09-11 10:36:51 +02:00

xfrm_hash.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm_hash.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm_input.c

xfrm: Reinject transport-mode packets through tasklet

2018-03-03 10:24:25 +01:00

xfrm_ipcomp.c

net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()

2018-04-08 14:26:29 +02:00

xfrm_output.c

xfrm: Fix GSO for IPsec with GRE tunnel.

2017-10-31 09:20:35 +01:00

xfrm_policy.c

net: xfrm: allow clearing socket xfrm policies.

2018-03-19 08:42:49 +01:00

xfrm_proc.c

proc: Reduce cache miss in xfrm_statistics_seq_show

2016-09-30 01:50:45 -04:00

xfrm_replay.c

xfrm: Fix xfrm_replay_overflow_offload_esn

2018-03-19 08:42:50 +01:00

xfrm_state.c

xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems

2018-04-08 14:26:29 +02:00

xfrm_sysctl.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm_user.c

xfrm_user: uncoditionally validate esn replay attribute struct

2018-04-08 14:26:28 +02:00