Hannes Frederic Sowa 3a1cebe7e0 ipv6: fix calculation of option len in ip6_append_data ... tot_len does specify the size of struct ipv6_txoptions. We need opt_flen + opt_nflen to calculate the overall length of additional ipv6 extensions. I found this while auditing the ipv6 output path for a memory corruption reported by Alexey Preobrazhensky while he fuzzed an instrumented AddressSanitizer kernel with trinity. This may or may not be the cause of the original bug. Fixes: 4df98e76cd ("ipv6: pmtudisc setting not respected with UFO/CORK") Reported-by: Alexey Preobrazhensky <preobr@google.com> Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2014-05-14 00:40:27 -04:00
..
netfilter	net: ipv6: more places need LOOPBACK_IFINDEX for flowi6_iif	2014-04-28 14:47:03 -04:00
addrconf.c	ipv6: move DAD and addrconf_verify processing to workqueue	2014-03-28 16:54:50 -04:00
addrconf_core.c
addrlabel.c
af_inet6.c
ah6.c	ah6: Use the IPsec protocol multiplexer API	2014-03-14 07:28:07 +01:00
anycast.c
datagram.c
esp6.c	esp6: Use the IPsec protocol multiplexer API	2014-03-14 07:28:07 +01:00
exthdrs.c
exthdrs_core.c	ipv6: ipv6_find_hdr restore prev functionality	2014-02-27 18:27:26 -05:00
exthdrs_offload.c	ipv6: Fix exthdrs offload registration.	2014-03-06 16:35:55 -05:00
fib6_rules.c
icmp.c	ipv6: some ipv6 statistic counters failed to disable bh	2014-03-31 16:38:12 -04:00
inet6_connection_sock.c	ipv4: add a sock pointer to ip_queue_xmit()	2014-04-15 12:58:34 -04:00
inet6_hashtables.c
ip6_checksum.c
ip6_fib.c	ipv6: fib: fix fib dump restart	2014-04-24 17:19:25 -04:00
ip6_flowlabel.c
ip6_gre.c	ip6_gre: don't allow to remove the fb_tunnel_dev	2014-04-15 14:56:19 -04:00
ip6_icmp.c
ip6_input.c
ip6_offload.c
ip6_offload.h
ip6_output.c	ipv6: fix calculation of option len in ip6_append_data	2014-05-14 00:40:27 -04:00
ip6_tunnel.c	ip6_tunnel: fix potential NULL pointer dereference	2014-05-13 00:27:19 -04:00
ip6_vti.c	vti6: Enable namespace changing	2014-03-14 07:28:09 +01:00
ip6mr.c	net: ipv6: more places need LOOPBACK_IFINDEX for flowi6_iif	2014-04-28 14:47:03 -04:00
ipcomp6.c	ipcomp6: Use the IPsec protocol multiplexer API	2014-03-14 07:28:07 +01:00
ipv6_sockglue.c
Kconfig
Makefile	xfrm6: Add IPsec protocol multiplexer	2014-03-14 07:28:07 +01:00
mcast.c	ipv6: some ipv6 statistic counters failed to disable bh	2014-03-31 16:38:12 -04:00
mip6.c
ndisc.c
netfilter.c	netfilter: Fix potential use after free in ip6_route_me_harder()	2014-05-09 02:36:39 +02:00
output_core.c	ipv6: strengthen fallback fragmentation id generation	2014-03-31 16:33:38 -04:00
ping.c	ipv6: some ipv6 statistic counters failed to disable bh	2014-03-31 16:38:12 -04:00
proc.c
protocol.c
raw.c
reassembly.c
route.c	net: ipv6: more places need LOOPBACK_IFINDEX for flowi6_iif	2014-04-28 14:47:03 -04:00
sit.c	sit: use the right netns in ioctl handler	2014-04-16 15:16:02 -04:00
syncookies.c
sysctl_net_ipv6.c
tcp_ipv6.c	net: ipv6: Fix oif in TCP SYN+ACK route lookup.	2014-04-11 16:43:47 -04:00
tcpv6_offload.c
tunnel6.c
udp.c
udp_impl.h
udp_offload.c
udplite.c
xfrm6_input.c
xfrm6_mode_beet.c
xfrm6_mode_ro.c
xfrm6_mode_transport.c
xfrm6_mode_tunnel.c	xfrm6: Remove xfrm_tunnel_notifier	2014-03-14 07:28:08 +01:00
xfrm6_output.c	ipv4: add a sock pointer to dst->output() path.	2014-04-15 13:47:15 -04:00
xfrm6_policy.c	xfrm6: Add IPsec protocol multiplexer	2014-03-14 07:28:07 +01:00
xfrm6_protocol.c	xfrm6: Add IPsec protocol multiplexer	2014-03-14 07:28:07 +01:00
xfrm6_state.c
xfrm6_tunnel.c