Sven Eckelmann 0ff0f15a32 batman-adv: Only read OGM2 tvlv_len after buffer len check ... Multiple batadv_ogm2_packet can be stored in an skbuff. The functions batadv_v_ogm_send_to_if() uses batadv_v_ogm_aggr_packet() to check if there is another additional batadv_ogm2_packet in the skb or not before they continue processing the packet. The length for such an OGM2 is BATADV_OGM2_HLEN + batadv_ogm2_packet->tvlv_len. The check must first check that at least BATADV_OGM2_HLEN bytes are available before it accesses tvlv_len (which is part of the header. Otherwise it might try read outside of the currently available skbuff to get the content of tvlv_len. Fixes: 9323158ef9 ("batman-adv: OGMv2 - implement originators logic") Signed-off-by: Sven Eckelmann <sven@narfation.org> Signed-off-by: Simon Wunderlich <sw@simonwunderlich.de>		2019-08-23 18:20:31 +02:00
..
Kconfig	batman-adv: Make sysfs support optional	2019-03-25 10:01:11 +01:00
Makefile	batman-adv: Make sysfs support optional	2019-03-25 10:01:11 +01:00
bat_algo.c	batman-adv: Drop license boilerplate	2019-03-25 09:31:35 +01:00
bat_algo.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
bat_iv_ogm.c	batman-adv: Only read OGM tvlv_len after buffer len check	2019-08-23 18:20:17 +02:00
bat_iv_ogm.h	batman-adv: Drop license boilerplate	2019-03-25 09:31:35 +01:00
bat_v.c	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
bat_v.h	batman-adv: Drop license boilerplate	2019-03-25 09:31:35 +01:00
bat_v_elp.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-04-05 14:14:19 -07:00
bat_v_elp.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
bat_v_ogm.c	batman-adv: Only read OGM2 tvlv_len after buffer len check	2019-08-23 18:20:31 +02:00
bat_v_ogm.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
bitarray.c	batman-adv: Drop license boilerplate	2019-03-25 09:31:35 +01:00
bitarray.h	batman-adv: Drop license boilerplate	2019-03-25 09:31:35 +01:00
bridge_loop_avoidance.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-04-05 14:14:19 -07:00
bridge_loop_avoidance.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
debugfs.c	batman-adv: no need to check return value of debugfs_create functions	2019-06-27 19:25:04 +02:00
debugfs.h	batman-adv: no need to check return value of debugfs_create functions	2019-06-27 19:25:04 +02:00
distributed-arp-table.c	batman-adv: allow updating DAT entry timeouts on incoming ARP Replies	2019-03-25 10:01:13 +01:00
distributed-arp-table.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
fragmentation.c	batman-adv: Drop license boilerplate	2019-03-25 09:31:35 +01:00
fragmentation.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
gateway_client.c	batman-adv: Make sysfs support optional	2019-03-25 10:01:11 +01:00
gateway_client.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
gateway_common.c	batman-adv: Fix includes for *_MAX constants	2019-05-25 12:59:53 +02:00
gateway_common.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
hard-interface.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-07-08 19:48:57 -07:00
hard-interface.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
hash.c	batman-adv: Drop license boilerplate	2019-03-25 09:31:35 +01:00
hash.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
icmp_socket.c	batman-adv: no need to check return value of debugfs_create functions	2019-06-27 19:25:04 +02:00
icmp_socket.h	batman-adv: no need to check return value of debugfs_create functions	2019-06-27 19:25:04 +02:00
log.c	batman-adv: no need to check return value of debugfs_create functions	2019-06-27 19:25:04 +02:00
log.h	batman-adv: Add missing include for atomic functions	2019-05-25 12:59:53 +02:00
main.c	This feature/cleanup patchset includes the following patches:	2019-05-09 09:44:17 -07:00
main.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
multicast.c	batman-adv: Fix deletion of RTR(4|6) mcast list entries	2019-07-22 21:34:58 +02:00
multicast.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
netlink.c	batman-adv: fix uninit-value in batadv_netlink_get_ifindex()	2019-08-14 19:27:07 +02:00
netlink.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
network-coding.c	batman-adv: no need to check return value of debugfs_create functions	2019-06-27 19:25:04 +02:00
network-coding.h	batman-adv: no need to check return value of debugfs_create functions	2019-06-27 19:25:04 +02:00
originator.c	batman-adv: mcast: detect, distribute and maintain multicast router presence	2019-06-27 19:25:05 +02:00
originator.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
routing.c	batman-adv: Drop license boilerplate	2019-03-25 09:31:35 +01:00
routing.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
send.c	batman-adv: Drop license boilerplate	2019-03-25 09:31:35 +01:00
send.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
soft-interface.c	batman-adv: mcast: shorten multicast tt/tvlv worker spinlock section	2019-05-25 12:59:54 +02:00
soft-interface.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
sysfs.c	batman-adv: Fix includes for *_MAX constants	2019-05-25 12:59:53 +02:00
sysfs.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
tp_meter.c	batman-adv: Fix includes for *_MAX constants	2019-05-25 12:59:53 +02:00
tp_meter.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
trace.c	batman-adv: Drop license boilerplate	2019-03-25 09:31:35 +01:00
trace.h	batman-adv: Drop license boilerplate	2019-03-25 09:31:35 +01:00
translation-table.c	batman-adv: fix for leaked TVLV handler.	2019-05-21 23:01:24 +02:00
translation-table.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
tvlv.c	batman-adv: Drop license boilerplate	2019-03-25 09:31:35 +01:00
tvlv.h	batman-adv: Use includes instead of fwdecls	2019-05-25 12:59:53 +02:00
types.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-07-08 19:48:57 -07:00