Paul Hüber 2cd0afc64e l2tp: avoid use-after-free caused by l2tp_ip_backlog_recv ... [ Upstream commit 51fb60eb162ab84c5edf2ae9c63cf0b878e5547e ] l2tp_ip_backlog_recv may not return -1 if the packet gets dropped. The return value is passed up to ip_local_deliver_finish, which treats negative values as an IP protocol number for resubmission. Signed-off-by: Paul Hüber <phueber@kernsp.in> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2017-03-22 12:04:14 +01:00
..
Kconfig	l2tp: Call udp_sock_create	2014-07-14 16:12:15 -07:00
l2tp_core.c	l2tp: fix configuration passed to setup_udp_tunnel_sock()	2016-06-24 10:18:17 -07:00
l2tp_core.h	l2tp: do not use udp_ioctl()	2017-02-18 16:39:28 +01:00
l2tp_debugfs.c	ipv6: make lookups simpler and faster	2013-10-09 00:01:25 -04:00
l2tp_eth.c	l2tp: auto load type modules	2015-09-25 12:27:22 -07:00
l2tp_ip.c	l2tp: avoid use-after-free caused by l2tp_ip_backlog_recv	2017-03-22 12:04:14 +01:00
l2tp_ip6.c	l2tp: do not use udp_ioctl()	2017-02-18 16:39:28 +01:00
l2tp_netlink.c	l2tp: Fix error creating L2TP tunnels	2016-03-03 15:07:07 -08:00
l2tp_ppp.c	l2tp: auto load type modules	2015-09-25 12:27:22 -07:00
Makefile	l2tp: introduce L2TPv3 IP encapsulation support for IPv6	2012-05-01 09:30:55 -04:00