Peter Oskolkov ef0f963de1 ip: discard IPv4 datagrams with overlapping segments. ... commit 7969e5c40dfd04799d4341f1b7cd266b6e47f227 upstream. This behavior is required in IPv6, and there is little need to tolerate overlapping fragments in IPv4. This change simplifies the code and eliminates potential DDoS attack vectors. Tested: ran ip_defrag selftest (not yet available uptream). Suggested-by: David S. Miller <davem@davemloft.net> Signed-off-by: Peter Oskolkov <posk@google.com> Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Florian Westphal <fw@strlen.de> Acked-by: Stephen Hemminger <stephen@networkplumber.org> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Mao Wenan <maowenan@huawei.com> [bwh: Backported to 4.4: - s/__IP_INC_STATS/IP_INC_STATS_BH/ - Deleted code is slightly different] Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-02-08 11:25:32 +01:00
..
asm-generic	mm: mlock: add mlock flags to enable VM_LOCKONFAULT usage	2015-11-05 19:34:48 -08:00
drm	virtio-gpu: fix ioctl and expose the fixed status to userspace.	2018-05-30 07:49:02 +02:00
linux	ip: discard IPv4 datagrams with overlapping segments.	2019-02-08 11:25:32 +01:00
misc
mtd	mtd: mtd-user: remove stdint.h include	2015-10-19 18:19:06 -07:00
rdma	Initial 4.4 merge window submission	2015-11-07 13:33:07 -08:00
scsi	cxlflash: Fix to avoid virtual LUN failover failure	2016-09-15 08:27:49 +02:00
sound	ASoC: Updates for v4.4	2015-10-26 12:14:49 +01:00
video
xen	xen/gntdev: use types from linux/types.h in userspace headers	2015-10-23 14:20:45 +01:00
Kbuild