Sascha Hlusiak 2d85289225 sit: fix off-by-one in ipip6_tunnel_get_prl ...

[ Upstream commit 298bf12ddb25841804f26234a43b89da1b1c0e21 ]

When requesting all prl entries (kprl.addr == INADDR_ANY) and there are
more prl entries than there is space passed from userspace, the existing
code would always copy cmax+1 entries, which is more than can be handled.

This patch makes the kernel copy only exactly cmax entries.

Signed-off-by: Sascha Hlusiak <contact@saschahlusiak.de>
Acked-By: Fred L. Templin <Fred.L.Templin@boeing.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2009-10-12 12:40:32 -07:00

..

9p

net/9p: insulate the client against an invalid error code sent by a 9p server

2009-08-17 16:39:54 -05:00

802

net: remove COMPAT_NET_DEV_OPS

2009-05-25 01:53:53 -07:00

8021q

8021q: Vlan driver should use rcu_barrier() on unload instead of syncronize_net()

2009-06-10 01:11:22 -07:00

appletalk

appletalk: Fix skb leak when ipddp interface is not loaded

2009-10-12 12:40:29 -07:00

atm

net: adding memory barrier to the poll and receive callbacks

2009-07-09 17:06:57 -07:00

ax25

ax25: Fix SIOCAX25GETINFO ioctl

2009-10-12 12:40:31 -07:00

bluetooth

bluetooth: rfcomm_init bug fix

2009-08-03 13:24:39 -07:00

bridge

netfilter: ebt_ulog: fix checkentry return value

2009-10-05 09:32:32 -07:00

can

can: fix NOHZ local_softirq_pending 08 warning

2009-10-05 09:32:13 -07:00

core

net: Fix sock_wfree() race

2009-10-12 12:40:27 -07:00

dcb

DCB: fix kfree(skb)

2009-01-04 17:29:21 -08:00

dccp

Merge branch 'master' of /home/davem/src/GIT/linux-2.6/

2009-08-09 21:29:47 -07:00

decnet

decnet: Use rcu_barrier() on module unload.

2009-06-26 13:51:27 -07:00

dsa

dsa: fix 88e6xxx statistics counter snapshotting

2009-07-05 18:03:35 -07:00

econet

econet: Fix econet_getname() leak

2009-08-06 13:08:40 -07:00

ethernet

net: remove COMPAT_NET_DEV_OPS

2009-05-25 01:53:53 -07:00

ieee802154

af_ieee802154: provide dummy get/setsockopt

2009-08-06 12:49:19 +04:00

ipv4

tcp: fix CONFIG_TCP_MD5SIG + CONFIG_PREEMPT timer BUG()

2009-10-12 12:40:26 -07:00

ipv6

sit: fix off-by-one in ipip6_tunnel_get_prl

2009-10-12 12:40:32 -07:00

ipx

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

irda

Merge branch 'master' of /home/davem/src/GIT/linux-2.6/

2009-08-09 21:29:47 -07:00

iucv

net: adding memory barrier to the poll and receive callbacks

2009-07-09 17:06:57 -07:00

key

net: correct off-by-one write allocations reports

2009-06-18 00:29:12 -07:00

lapb

…

llc

NET: llc, zero sockaddr_llc struct

2009-08-23 22:55:51 -07:00

mac80211

mac80211: fix todo lock

2009-08-17 13:38:34 -04:00

netfilter

netfilter: nf_conntrack: netns fix re reliable conntrack event delivery

2009-10-05 09:32:31 -07:00

netlabel

net/netlabel: Add kmalloc NULL tests

2009-07-30 10:58:28 -07:00

netlink

net: correct off-by-one write allocations reports

2009-06-18 00:29:12 -07:00

netrom

NETROM: Fix use of static buffer

2009-08-17 18:05:32 -07:00

packet

net: Make the copy length in af_packet sockopt handler unsigned

2009-10-05 09:32:22 -07:00

phonet

phonet: phonet_device_get() fix

2009-08-05 12:14:09 -07:00

rds

Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6

2009-05-18 21:08:20 -07:00

rfkill

rfkill: fix rfkill_set_states() to set the hw state

2009-07-21 12:07:38 -04:00

rose

rose: Fix rose_getname() leak

2009-08-06 13:08:38 -07:00

rxrpc

net: adding memory barrier to the poll and receive callbacks

2009-07-09 17:06:57 -07:00

sched

tc: Fix unitialized kernel memory leak

2009-09-02 22:55:17 -07:00

sctp

sctp: fix missing destroy of percpu counter variable in sctp_proc_exit()

2009-08-09 21:45:43 -07:00

sunrpc

SUNRPC: Fix rpc_task_force_reencode

2009-08-28 19:35:56 -10:00

tipc

tipc: Use genl_register_family_with_ops()

2009-05-21 16:50:23 -07:00

unix

net: unix: fix sending fds in multiple buffers

2009-10-12 12:40:25 -07:00

wanrouter

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

wimax

wimax: fix warning caused by not checking retval of rfkill_set_hw_state()

2009-06-11 11:12:48 -07:00

wireless

cfg80211: fix looping soft lockup in find_ie()

2009-09-24 08:43:51 -07:00

x25

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

xfrm

Fix xfrm hash collisions by changing __xfrm4_daddr_saddr_hash to hash addresses with addition

2009-08-09 21:45:31 -07:00

compat.c

net: socket infrastructure for SO_TIMESTAMPING

2009-02-15 22:43:35 -08:00

Kconfig

net: add IEEE 802.15.4 socket family implementation

2009-06-09 05:25:32 -07:00

Makefile

net: add IEEE 802.15.4 socket family implementation

2009-06-09 05:25:32 -07:00

nonet.c

…

socket.c

Make sock_sendpage() use kernel_sendpage()

2009-08-13 10:57:26 -07:00

sysctl_net.c

net: sysctl_net - use net_eq to compare nets

2009-03-16 16:23:30 +01:00

TUNABLE

…