Eric Dumazet 68b87a2b4a tcp: take care of truncations done by sk_filter() ... With syzkaller help, Marco Grassi found a bug in TCP stack, crashing in tcp_collapse() Root cause is that sk_filter() can truncate the incoming skb, but TCP stack was not really expecting this to happen. It probably was expecting a simple DROP or ACCEPT behavior. We first need to make sure no part of TCP header could be removed. Then we need to adjust TCP_SKB_CB(skb)->end_seq Many thanks to syzkaller team and Marco for giving us a reproducer. CRs-Fixed: 1089895 Change-Id: I84185558fa6e80b13d7d0078bda9d75143680941 Signed-off-by: Eric Dumazet <edumazet@google.com> Reported-by: Marco Grassi <marco.gra@gmail.com> Reported-by: Vladis Dronov <vdronov@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> Git-commit: ac6e780070e30e4c35bd395acfe9191e6268bdd3 Git-repo: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git [subashab@codeaurora.org: resolve trivial merge conflicts] Signed-off-by: Subash Abhinov Kasiviswanathan <subashab@codeaurora.org>		2016-11-15 14:54:51 -07:00
..
netfilter	Merge "netfilter: x_tables: validate e->target_offset early"	2016-09-30 18:23:30 -07:00
addrconf.c	Merge remote-tracking branch 'origin/tmp-917a9a9133a6' into lsk	2016-07-12 11:40:49 -07:00
addrconf_core.c
addrlabel.c	ipv6/addrlabel: fix ip6addrlbl_get()	2015-12-22 15:57:54 -05:00
af_inet6.c	Revert "net: socket ioctl to reset connections matching local address"	2016-05-19 12:32:41 +05:30
ah6.c	net: core: Support UID-based routing.	2016-02-16 13:51:37 -08:00
anycast.c
datagram.c	Merge remote-tracking branch 'origin/tmp-917a9a9133a6' into lsk	2016-07-12 11:40:49 -07:00
esp6.c	net: core: Support UID-based routing.	2016-02-16 13:51:37 -08:00
exthdrs.c	ipv6: add complete rcu protection around np->opt	2015-12-02 23:37:16 -05:00
exthdrs_core.c	Merge remote-tracking branch 'msm-4.4/tmp-2bf7955' into msm-4.4	2016-07-22 16:45:32 -07:00
exthdrs_offload.c
fib6_rules.c	ipv6: fix the incorrect return value of throw route	2015-10-23 02:38:18 -07:00
icmp.c	net: core: Support UID-based routing.	2016-02-16 13:51:37 -08:00
ila.c	dst: Pass net into dst->output	2015-10-08 04:27:03 -07:00
inet6_connection_sock.c	net: ipv4: Fix type casting to resolve compilation errors	2016-04-12 15:49:42 -07:00
inet6_hashtables.c	net: SO_INCOMING_CPU setsockopt() support	2015-10-12 19:28:20 -07:00
ip6_checksum.c
ip6_fib.c	ipv6: Fix mem leak in rt6i_pcpu	2016-07-27 09:47:31 -07:00
ip6_flowlabel.c	ipv6: fix a lockdep splat	2016-03-03 15:07:05 -08:00
ip6_gre.c	tunnel: Clear IPCB(skb)->opt before dst_link_failure called	2016-04-20 15:41:56 +09:00
ip6_icmp.c
ip6_input.c
ip6_offload.c	ipv4/GRO: Make GRO conform to RFC 6864	2016-08-26 15:05:01 -07:00
ip6_offload.h
ip6_output.c	Merge remote-tracking branch 'msm4.4/tmp-da9a92f' into msm-4.4	2016-10-28 10:48:35 -07:00
ip6_tunnel.c	ip6_tunnel: set rtnl_link_ops before calling register_netdevice	2016-04-20 15:42:06 +09:00
ip6_udp_tunnel.c
ip6_vti.c	net: ipv6: fix virtual tunneling build	2016-02-16 13:51:45 -08:00
ip6mr.c	ipmr/ip6mr: Initialize the last assert time of mfc entries.	2016-07-11 09:31:11 -07:00
ipcomp6.c	net: core: Support UID-based routing.	2016-02-16 13:51:37 -08:00
ipv6_sockglue.c	ipv6: add complete rcu protection around np->opt	2015-12-02 23:37:16 -05:00
Kconfig
Makefile
mcast.c	mld, igmp: Fix reserved tailroom calculation	2016-04-20 15:41:58 +09:00
mcast_snoop.c
mip6.c	ipv6: use ktime_t for internal timestamps	2015-10-05 03:16:47 -07:00
ndisc.c	ipv6: honor ifindex in case we receive ll addresses in router advertisements	2015-12-23 22:03:54 -05:00
netfilter.c	ipv6: Pass struct net into ip6_route_me_harder	2015-09-29 20:21:32 +02:00
output_core.c	ipv4, ipv6: Pass net into ip_local_out and ip6_local_out	2015-10-08 04:27:02 -07:00
ping.c	net: core: Support UID-based routing.	2016-02-16 13:51:37 -08:00
proc.c
protocol.c
raw.c	net: core: Support UID-based routing.	2016-02-16 13:51:37 -08:00
reassembly.c	Revert "Merge remote-tracking branch 'msm-4.4/tmp-510d0a3f' into msm-4.4"	2016-08-26 14:34:05 -07:00
route.c	Merge remote-tracking branch 'msm-4.4/tmp-510d0a3f' into msm-4.4	2016-10-21 18:00:55 -07:00
sit.c	sit: correct IP protocol used in ipip6_err	2016-07-11 09:31:11 -07:00
syncookies.c	net: core: Support UID-based routing.	2016-02-16 13:51:37 -08:00
sysctl_net_ipv6.c
tcp_ipv6.c	tcp: take care of truncations done by sk_filter()	2016-11-15 14:54:51 -07:00
tcpv6_offload.c
tunnel6.c	ipv6: fix tunnel error handling	2015-11-03 10:52:13 -05:00
udp.c	Merge remote-tracking branch 'msm-4.4/tmp-2bf7955' into msm-4.4	2016-07-22 16:45:32 -07:00
udp_impl.h
udp_offload.c
udplite.c
xfrm6_input.c
xfrm6_mode_beet.c
xfrm6_mode_ro.c
xfrm6_mode_transport.c
xfrm6_mode_tunnel.c	ipv6: update skb->csum when CE mark is propagated	2016-01-31 11:29:01 -08:00
xfrm6_output.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-10-24 06:54:12 -07:00
xfrm6_policy.c	net: Revert upstream changes which break routing in tunnel scenarios	2016-07-21 10:58:54 -06:00
xfrm6_protocol.c
xfrm6_state.c
xfrm6_tunnel.c