Willem de Bruijn c7a9d69b72 ipv6: invert flowlabel sharing check in process and user mode ... [ Upstream commit 95c169251bf734aa555a1e8043e4d88ec97a04ec ] A request for a flowlabel fails in process or user exclusive mode must fail if the caller pid or uid does not match. Invert the test. Previously, the test was unsafe wrt PID recycling, but indeed tested for inequality: fl1->owner != fl->owner Fixes: 4f82f45730 ("net ip6 flowlabel: Make owner a union of struct pid* and kuid_t") Signed-off-by: Willem de Bruijn <willemb@google.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-05-16 19:44:59 +02:00
..
netfilter	netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES	2019-03-23 08:44:29 +01:00
addrconf.c	net: fix IPv6 prefix route residue	2019-02-23 09:05:13 +01:00
addrconf_core.c	ipv6: change ipv6_stub_impl.ipv6_dst_lookup to take net argument	2015-07-31 15:21:30 -07:00
addrlabel.c	ipv6/addrlabel: fix ip6addrlbl_get()	2015-12-22 15:57:54 -05:00
af_inet6.c	ipv6: Consider sk_bound_dev_if when binding a socket to an address	2019-02-06 19:43:06 +01:00
ah6.c	ipsec: check return value of skb_to_sgvec always	2018-04-13 19:50:23 +02:00
anycast.c	ipv6: coding style: comparison for equality with NULL	2015-03-31 13:51:54 -04:00
datagram.c	ip: on queued skb use skb_header_pointer instead of pskb_may_pull	2019-01-26 09:42:49 +01:00
esp6.c	ipsec: check return value of skb_to_sgvec always	2018-04-13 19:50:23 +02:00
exthdrs.c	ipv6: add complete rcu protection around np->opt	2015-12-02 23:37:16 -05:00
exthdrs_core.c	ipv6: re-enable fragment header matching in ipv6_find_hdr	2016-04-20 15:41:59 +09:00
exthdrs_offload.c	ipv6: fix exthdrs offload registration in out_rt path	2015-09-02 15:31:00 -07:00
fib6_rules.c	ipv6: Do not leak throw route references	2017-07-05 14:37:14 +02:00
icmp.c	ipv6: fix endianness error in icmpv6_err	2019-04-03 06:23:24 +02:00
ila.c	dst: Pass net into dst->output	2015-10-08 04:27:03 -07:00
inet6_connection_sock.c	ipv6: kill sk_dst_lock	2015-12-03 11:32:06 -05:00
inet6_hashtables.c	net: SO_INCOMING_CPU setsockopt() support	2015-10-12 19:28:20 -07:00
ip6_checksum.c	udplite: fix partial checksum initialization	2018-03-11 16:19:46 +01:00
ip6_fib.c	ipv6: fix typo in fib6_net_exit()	2017-09-27 11:00:12 +02:00
ip6_flowlabel.c	ipv6: invert flowlabel sharing check in process and user mode	2019-05-16 19:44:59 +02:00
ip6_gre.c	ip6_gre: better validate user provided tunnel names	2018-04-13 19:50:26 +02:00
ip6_icmp.c
ip6_input.c	netfilter: Pass net into okfn	2015-09-17 17:18:37 -07:00
ip6_offload.c	gso_segment: Reset skb->mac_len after modifying network header	2018-09-29 03:08:52 -07:00
ip6_offload.h
ip6_output.c	ipv6: Fix dangling pointer when ipv6 fragment	2019-04-27 09:33:54 +02:00
ip6_tunnel.c	ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type	2019-04-27 09:33:55 +02:00
ip6_udp_tunnel.c	ipv6: explicitly initialize udp6_addr in udp_sock_create6()	2019-01-13 10:05:27 +01:00
ip6_vti.c	vti6: flush x-netns xfrm cache when vti interface is removed	2018-11-10 07:41:38 -08:00
ip6mr.c	ip6mr: Do not call __IP6_INC_STATS() from preemptible context	2019-03-23 08:44:24 +01:00
ipcomp6.c
ipv6_sockglue.c	netfilter: drop outermost socket lock in getsockopt()	2018-02-28 10:17:21 +01:00
Kconfig	ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV	2018-08-15 17:42:05 +02:00
Makefile	net: Identifier Locator Addressing module	2015-08-17 21:33:06 -07:00
mcast.c	ipv6: mcast: fix a use-after-free in inet6_mc_check	2018-11-10 07:41:41 -08:00
mcast_snoop.c	net: fix wrong skb_get() usage / crash in IGMP/MLD parsing code	2015-08-13 17:08:39 -07:00
mip6.c	ipv6: use ktime_t for internal timestamps	2015-10-05 03:16:47 -07:00
ndisc.c	ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called	2018-11-10 07:41:41 -08:00
netfilter.c	ipv6: Pass struct net into ip6_route_me_harder	2015-09-29 20:21:32 +02:00
output_core.c	ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()	2017-09-27 11:00:10 +02:00
ping.c	net: ping: do not abuse udp_poll()	2017-06-14 13:16:19 +02:00
proc.c	inet: frags: break the 2GB limit for frags storage	2019-02-08 11:25:31 +01:00
protocol.c
raw.c	net: ping: do not abuse udp_poll()	2017-06-14 13:16:19 +02:00
reassembly.c	ip: use rb trees for IP frag queue.	2019-02-08 11:25:32 +01:00
route.c	net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255	2019-03-23 08:44:30 +01:00
sit.c	ipv6: sit: reset ip header pointer in ipip6_rcv	2019-04-27 09:33:54 +02:00
syncookies.c	ipv4: ipv6: initialize treq->txhash in cookie_v[46]_check()	2017-08-11 09:08:51 -07:00
sysctl_net_ipv6.c	ipv6: Implement different admin modes for automatic flow labels	2015-07-31 17:07:11 -07:00
tcp_ipv6.c	tcp: do not use ipv6 header for ipv4 flow	2019-04-03 06:23:25 +02:00
tcpv6_offload.c	tcp: cleanup static functions	2015-02-28 16:56:51 -05:00
tunnel6.c	ipv6: fix tunnel error handling	2015-11-03 10:52:13 -05:00
udp.c	udplite: call proper backlog handlers	2019-03-23 08:44:29 +01:00
udp_impl.h	udplite: call proper backlog handlers	2019-03-23 08:44:29 +01:00
udp_offload.c	net: avoid skb_warn_bad_offload false positives on UFO	2017-08-12 19:29:08 -07:00
udplite.c	udplite: call proper backlog handlers	2019-03-23 08:44:29 +01:00
xfrm6_input.c	netfilter: Pass struct net into the netfilter hooks	2015-09-17 17:18:37 -07:00
xfrm6_mode_beet.c	xfrm: simplify xfrm_address_t use	2015-03-31 13:58:35 -04:00
xfrm6_mode_ro.c	ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()	2017-06-14 13:16:19 +02:00
xfrm6_mode_transport.c	ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()	2017-06-14 13:16:19 +02:00
xfrm6_mode_tunnel.c	ipv6: update skb->csum when CE mark is propagated	2016-01-31 11:29:01 -08:00
xfrm6_output.c	xfrm6: call kfree_skb when skb is toobig	2018-11-10 07:41:32 -08:00
xfrm6_policy.c	xfrm6: avoid potential infinite loop in _decode_session6()	2018-07-03 11:21:24 +02:00
xfrm6_protocol.c
xfrm6_state.c
xfrm6_tunnel.c	xfrm6_tunnel: Fix spi check in __xfrm6_tunnel_alloc_spi	2019-02-20 10:13:10 +01:00