Marcelo Leitner 77751427a1 ipv6: addrconf: validate new MTU before applying it ... Currently we don't check if the new MTU is valid or not and this allows one to configure a smaller than minimum allowed by RFCs or even bigger than interface own MTU, which is a problem as it may lead to packet drops. If you have a daemon like NetworkManager running, this may be exploited by remote attackers by forging RA packets with an invalid MTU, possibly leading to a DoS. (NetworkManager currently only validates for values too small, but not for too big ones.) The fix is just to make sure the new value is valid. That is, between IPV6_MIN_MTU and interface's MTU. Note that similar check is already performed at ndisc_router_discovery(), for when kernel itself parses the RA. Signed-off-by: Marcelo Ricardo Leitner <mleitner@redhat.com> Signed-off-by: Sabrina Dubroca <sd@queasysnail.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2015-02-23 18:16:12 -05:00
..
6lowpan	net/6lowpan: Remove FSF address from GPL statement.	2014-12-05 12:43:04 +01:00
9p	9p/trans_virtio: enable VQs early	2014-10-15 10:25:04 +10:30
802	…
8021q	vlan: advertise link netns via netlink	2015-01-23 17:51:15 -08:00
appletalk	new helper: memcpy_from_msg()	2014-11-24 04:28:48 -05:00
atm	put iov_iter into msghdr	2014-12-09 16:29:03 -05:00
ax25	new helper: memcpy_from_msg()	2014-11-24 04:28:48 -05:00
batman-adv	batman-adv: Kconfig, Add missing DEBUG_FS dependency	2015-01-07 22:17:11 +01:00
bluetooth	Bluetooth: Fix potential NULL dereference	2015-02-03 09:02:12 +01:00
bridge	bridge: netfilter: Move sysctl-specific error code inside #ifdef	2015-02-12 08:44:46 -08:00
caif	caif: fix a signedness bug in cfpkt_iterate()	2015-02-20 17:35:14 -05:00
can	netlink: make nlmsg_end() and genlmsg_end() void	2015-01-18 01:03:45 -05:00
ceph	mm: gup: use get_user_pages_unlocked	2015-02-11 17:06:05 -08:00
core	net: pktgen: disable xmit_clone on virtual devices	2015-02-22 22:43:20 -05:00
dcb	dcbnl : Disable software interrupts before taking dcb_lock	2014-11-16 14:50:52 -05:00
dccp	net: introduce helper macro for_each_cmsghdr	2014-12-10 22:41:55 -05:00
decnet	decnet: Fix obvious o/0 typo	2015-02-23 15:28:50 -05:00
dns_resolver	Merge commit 'v3.16' into next	2014-10-01 00:44:04 +10:00
dsa	net: dsa: Set valid phy interface type	2015-02-17 10:37:39 -08:00
ethernet	net: Add Transparent Ethernet Bridging GRO support.	2015-01-02 15:46:41 -05:00
hsr	…
ieee802154	netlink: make nlmsg_end() and genlmsg_end() void	2015-01-18 01:03:45 -05:00
ipv4	tcp: fix tcp_should_expand_sndbuf() to use tcp_packets_in_flight()	2015-02-22 23:07:11 -05:00
ipv6	ipv6: addrconf: validate new MTU before applying it	2015-02-23 18:16:12 -05:00
ipx	switch ipxrtr_route_packet() from iovec to msghdr	2014-11-24 04:28:49 -05:00
irda	irda: replace current->state by set_current_state()	2015-02-23 17:21:11 -05:00
iucv	net: introduce helper macro for_each_cmsghdr	2014-12-10 22:41:55 -05:00
key	new helper: memcpy_from_msg()	2014-11-24 04:28:48 -05:00
l2tp	netlink: make nlmsg_end() and genlmsg_end() void	2015-01-18 01:03:45 -05:00
lapb	lapb: move EXPORT_SYMBOL after functions.	2014-10-24 15:51:42 -04:00
llc	net: llc: use correct size for sysctl timeout entries	2015-01-25 00:23:21 -08:00
mac80211	Last round of updates for net-next:	2015-02-04 14:57:45 -08:00
mac802154	mac802154: fix kbuild test robot warning	2015-01-03 01:51:51 +01:00
mpls	net: mark some potential candidates __read_mostly	2015-01-30 17:58:39 -08:00
netfilter	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf	2015-02-20 17:36:20 -05:00
netlabel	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2015-02-11 20:25:11 -08:00
netlink	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-02-05 14:33:28 -08:00
netrom	new helper: memcpy_from_msg()	2014-11-24 04:28:48 -05:00
nfc	NFC: nci: Move NFCEE discovery logic	2015-02-04 09:15:18 +01:00
openvswitch	openvswitch: Fix net exit.	2015-02-20 15:32:08 -05:00
packet	af_packet: allow packets defragmentation not only for hash fanout type	2015-02-21 23:00:18 -05:00
phonet	phonet netlink: allow multiple messages per skb in route dump	2015-01-19 16:20:17 -05:00
rds	rds: rds_cong_queue_updates needs to defer the congestion update transmission	2015-02-11 14:35:44 -08:00
rfkill	Last round of updates for net-next:	2015-02-04 14:57:45 -08:00
rose	new helper: memcpy_from_msg()	2014-11-24 04:28:48 -05:00
rxrpc	Merge branch 'for-davem' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-02-04 20:46:55 -08:00
sched	ematch: Fix auto-loading of ematch modules.	2015-02-20 15:30:56 -05:00
sctp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-02-05 14:33:28 -08:00
sunrpc	Merge branch 'for-3.20' of git://linux-nfs.org/~bfields/linux	2015-02-12 10:39:41 -08:00
switchdev	swdevice: add new apis to set and del bridge port attributes	2015-02-01 23:16:34 -08:00
tipc	tipc: remove tipc_snprintf	2015-02-09 13:20:49 -08:00
unix	net: remove sock_iocb	2015-01-28 23:15:07 -08:00
vmw_vsock	vmci: propagate msghdr all way down to __qp_memcpy_to_queue()	2015-02-04 01:34:14 -05:00
wimax	wimax: convert printk to pr_foo()	2014-10-07 20:28:44 -04:00
wireless	Last round of updates for net-next:	2015-02-04 14:57:45 -08:00
x25	new helper: memcpy_from_msg()	2014-11-24 04:28:48 -05:00
xfrm	netlink: make nlmsg_end() and genlmsg_end() void	2015-01-18 01:03:45 -05:00
Kconfig	net: introduce generic switch devices support	2014-12-02 20:01:20 -08:00
Makefile	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2014-12-16 15:53:03 -08:00
compat.c	net: compat: Ignore MSG_CMSG_COMPAT in compat_sys_{send, recv}msg	2015-02-23 17:22:05 -05:00
socket.c	net: switch sockets to ->read_iter/->write_iter	2015-02-04 01:34:15 -05:00
sysctl_net.c	…