Guillaume Nault dedf29a064 pppoe: check sockaddr length in pppoe_connect() ...

[ Upstream commit a49e2f5d5f ]

We must validate sockaddr_len, otherwise userspace can pass fewer data
than we expect and we end up accessing invalid data.

Fixes: 224cf5ad14 ("ppp: Move the PPP drivers")
Reported-by: syzbot+4f03bdf92fdf9ef5ddab@syzkaller.appspotmail.com
Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-04-29 07:50:05 +02:00

..

appletalk

net/appletalk: Fix kernel memory disclosure

2017-12-09 18:42:42 +01:00

arcnet

arcnet/com20020: add LEDS_CLASS dependency

2015-11-03 11:29:56 -05:00

bonding

bonding: do not set slave_dev npinfo before slave_enable_netpoll in bond_enslave

2018-04-29 07:50:04 +02:00

caif

net: caif: check return value of alloc_netdev

2015-11-09 11:31:13 -05:00

can

can: cc770: Fix use after free in cc770_tx_interrupt()

2018-03-28 18:40:16 +02:00

cris

eth_v10: remove unnecessary break after return

2014-07-20 21:29:49 -07:00

dsa

net: dsa: bcm_sf2: Ensure we re-negotiate EEE during after link change

2016-12-10 19:07:23 +01:00

ethernet

r8169: fix setting driver_data after register_netdev

2018-04-13 19:50:27 +02:00

fddi

net/fddi: remove HWM_REVERSE() macro

2015-08-13 21:12:17 -07:00

fjes

fjes: Fix wrong netdevice feature flags

2017-12-20 10:04:55 +01:00

hamradio

hdlcdrv: Fix divide by zero in hdlcdrv_ioctl

2018-04-13 19:50:14 +02:00

hippi

hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close

2018-02-25 11:03:42 +01:00

hyperv

hv_netvsc: use skb_get_hash() instead of a homegrown implementation

2017-03-26 12:13:18 +02:00

ieee802154

fakelb: fix schedule while atomic

2017-03-15 09:57:15 +08:00

ipvlan

ipvlan: add L2 check for packets arriving via virtual devices

2018-03-22 09:23:30 +01:00

irda

irda: vlsi_ir: fix check for DMA mapping errors

2017-12-25 14:22:12 +01:00

phy

net: phy: avoid genphy_aneg_done() for PHYs without clause 22 support

2018-04-13 19:50:18 +02:00

plip

…

ppp

pppoe: check sockaddr length in pppoe_connect()

2018-04-29 07:50:05 +02:00

slip

slip: Check if rstate is initialized before uncompressing

2018-04-24 09:32:04 +02:00

team

team: fix netconsole setup over team

2018-04-29 07:50:05 +02:00

usb

r8152: add Linksys USB3GIGV1 id

2018-04-29 07:50:01 +02:00

vmxnet3

vmxnet3: ensure that adapter is in proper state during force_close

2018-04-13 19:50:04 +02:00

wan

wan: pc300too: abort path on failure

2018-03-24 10:58:43 +01:00

wimax

net: wimax/i2400m: fix NULL-deref at probe

2017-12-20 10:04:54 +01:00

wireless

Revert "ath10k: send (re)assoc peer command when NSS changed"

2018-04-29 07:50:02 +02:00

xen-netback

xen/netback: set default upper limit of tx/rx queues to 8

2017-11-15 17:13:09 +01:00

dummy.c

net: dummy: add more features

2015-10-21 19:36:10 -07:00

eql.c

net: better IFF_XMIT_DST_RELEASE support

2014-10-07 13:22:11 -04:00

geneve.c

geneve: avoid use-after-free of skb->data

2016-12-10 19:07:24 +01:00

ifb.c

ifb: add multiqueue operation

2015-07-08 16:00:09 -07:00

Kconfig

vmxnet3: prevent building with 64K pages

2018-02-25 11:03:42 +01:00

LICENSE.SRC

…

loopback.c

net: introduce device min_header_len

2017-02-18 16:39:27 +01:00

macvlan.c

macvlan: Only deliver one copy of the frame to the macvlan interface

2017-12-20 10:05:01 +01:00

macvtap.c

tun/tap: sanitize TUNSETSNDBUF input

2017-11-18 11:11:05 +01:00

Makefile

fjes: Introduce FUJITSU Extended Socket Network Device driver

2015-08-24 14:06:33 -07:00

mdio.c

…

mii.c

mii: Handle link state changes for forced modes in mii_check_media()

2015-01-19 15:43:42 -05:00

netconsole.c

netconsole: use per-attribute show and store methods

2015-10-13 22:17:51 -07:00

nlmon.c

net: nlmon: convert to using IFF_NO_QUEUE

2015-08-18 11:55:05 -07:00

ntb_netdev.c

NTB: Add flow control to the ntb_netdev

2015-09-07 15:17:08 -04:00

rionet.c

rapidio/rionet: fix deadlock on SMP

2016-04-12 09:08:58 -07:00

sb1000.c

PNP: net/sb1000: Use module_pnp_driver to register driver

2015-03-18 22:39:17 +01:00

Space.c

…

sungem_phy.c

sungem: Fix global namespace pollution of phy accessors.

2014-08-27 23:07:12 -07:00

tun.c

tun: allow positive return values on dev_get_valid_name() call

2017-11-18 11:11:06 +01:00

veth.c

veth: set peer GSO values

2018-03-22 09:23:29 +01:00

virtio_net.c

virtio_net: check return value of skb_to_sgvec in one more location

2018-04-13 19:50:23 +02:00

vrf.c

vrf: Fix use after free and double free in vrf_finish_output

2018-04-13 19:50:27 +02:00

vxlan.c

vxlan: dont migrate permanent fdb entries during learn

2018-04-13 19:50:21 +02:00

xen-netfront.c

xen-netfront: Fix hang on device removal

2018-04-24 09:32:06 +02:00