Patrick McHardy f4a87e7bd2 netfilter: synproxy: fix BUG_ON triggered by corrupt TCP packets ... TCP packets hitting the SYN proxy through the SYNPROXY target are not validated by TCP conntrack. When th->doff is below 5, an underflow happens when calculating the options length, causing skb_header_pointer() to return NULL and triggering the BUG_ON(). Handle this case gracefully by checking for NULL instead of using BUG_ON(). Reported-by: Martin Topholm <mph@one.com> Tested-by: Martin Topholm <mph@one.com> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2013-09-30 12:44:38 +02:00
..
9p	for-linus-3.12-merge minor 9p fixes and tweaks for 3.12 merge window	2013-09-11 12:34:13 -07:00
802
8021q	net: vlan: inherit addr_assign_type along with dev_addr	2013-09-03 20:57:49 -04:00
appletalk
atm
ax25
batman-adv	batman: Remove reference to compare_ether_addr	2013-09-03 22:34:48 -04:00
bluetooth	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/hid	2013-09-06 09:30:36 -07:00
bridge	bridge: fix NULL pointer deref of br_port_get_rcu	2013-09-15 22:03:33 -04:00
caif	caif: Add missing braces to multiline if in cfctrl_linkup_request	2013-09-05 14:31:02 -04:00
can	can: gw: add a per rule limitation of frame hops	2013-08-29 22:58:24 +02:00
ceph	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client	2013-09-09 09:13:22 -07:00
core	netpoll: Should handle ETH_P_ARP other than ETH_P_IP in netpoll_neigh_reply	2013-09-12 17:19:14 -04:00
dcb
dccp
decnet
dns_resolver
dsa	net: dsa: inherit addr_assign_type along with dev_addr	2013-09-03 20:57:49 -04:00
ethernet
ieee802154	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-09-05 14:54:29 -07:00
ipv4	netfilter: synproxy: fix BUG_ON triggered by corrupt TCP packets	2013-09-30 12:44:38 +02:00
ipv6	netfilter: synproxy: fix BUG_ON triggered by corrupt TCP packets	2013-09-30 12:44:38 +02:00
ipx
irda
iucv
key
l2tp
lapb
llc	llc: Use normal etherdevice.h tests	2013-09-03 22:34:47 -04:00
mac80211	Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next	2013-08-28 13:51:40 -04:00
mac802154
mpls
netfilter	netfilter: synproxy: fix BUG_ON triggered by corrupt TCP packets	2013-09-30 12:44:38 +02:00
netlabel
netlink	net: netlink: filter particular protocols from analyzers	2013-09-06 14:43:48 -04:00
netrom
nfc
openvswitch	net: ovs: flow: fix potential illegal memory access in __parse_flow_nlattrs	2013-09-11 16:09:58 -04:00
packet	net: packet: use reciprocal_divide in fanout_demux_hash	2013-08-29 16:43:29 -04:00
phonet
rds
rfkill	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-09-05 14:54:29 -07:00
rose
rxrpc
sched	net_sched: htb: fix a typo in htb_change_class()	2013-09-11 17:16:22 -04:00
sctp	net: sctp: rfc4443: do not report ICMP redirects to user space	2013-09-16 21:40:15 -04:00
sunrpc	Merge branch 'nfsd-next' of git://linux-nfs.org/~bfields/linux	2013-09-10 20:04:59 -07:00
tipc	tipc: set sk_err correctly when connection fails	2013-08-30 16:06:57 -04:00
unix
vmw_vsock
wimax
wireless	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-09-05 14:54:29 -07:00
x25	x25: add a sanity check parsing X.25 facilities	2013-09-04 00:27:27 -04:00
xfrm	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2013-09-05 14:58:52 -04:00
compat.c
Kconfig
Makefile
nonet.c
socket.c	kernel-wide: fix missing validations on __get/__put/__copy_to/__copy_from_user()	2013-09-11 15:58:18 -07:00
sysctl_net.c