Steffen Klassert 5ce93bd4cc xfrm: Validate address prefix lengths in the xfrm selector. ... [ Upstream commit 07bf7908950a8b14e81aa1807e3c667eab39287a ] We don't validate the address prefix lengths in the xfrm selector we got from userspace. This can lead to undefined behaviour in the address matching functions if the prefix is too big for the given address family. Fix this by checking the prefixes and refuse SA/policy insertation when a prefix is invalid. Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") Reported-by: Air Icy <icytxw@gmail.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2018-11-10 07:41:32 -08:00
..
Kconfig
Makefile
xfrm_algo.c	ipsec: Replace seqniv with seqiv	2015-08-17 16:53:42 +08:00
xfrm_hash.c
xfrm_hash.h	xfrm: hash prefixed policies based on preflen thresholds	2014-09-02 13:29:44 +02:00
xfrm_input.c	xfrm: Fix crash observed during device unregistration and decryption	2016-04-20 15:42:05 +09:00
xfrm_ipcomp.c	net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()	2018-04-08 11:51:59 +02:00
xfrm_output.c	net: preserve IP control block during GSO segmentation	2016-01-31 11:29:00 -08:00
xfrm_policy.c	xfrm: fix 'passing zero to ERR_PTR()' warning	2018-09-26 08:35:04 +02:00
xfrm_proc.c	net: clean up snmp stats code	2014-05-07 16:06:05 -04:00
xfrm_replay.c	xfrm: Always zero high-order sequence number bits	2015-05-21 06:56:23 +02:00
xfrm_state.c	xfrm: fix xfrm_do_migrate() with AEAD e.g(AES-GCM)	2018-05-26 08:48:50 +02:00
xfrm_sysctl.c
xfrm_user.c	xfrm: Validate address prefix lengths in the xfrm selector.	2018-11-10 07:41:32 -08:00