Chris Wright ddb2c43594 asn1: additional sanity checking during BER decoding ... - Don't trust a length which is greater than the working buffer. An invalid length could cause overflow when calculating buffer size for decoding oid. - An oid length of zero is invalid and allows for an off-by-one error when decoding oid because the first subid actually encodes first 2 subids. - A primitive encoding may not have an indefinite length. Thanks to Wei Wang from McAfee for report. Cc: Steven French <sfrench@us.ibm.com> Cc: stable@kernel.org Acked-by: Patrick McHardy <kaber@trash.net> Signed-off-by: Chris Wright <chrisw@sous-sol.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2008-06-05 14:24:54 -07:00
..
9p	9p: fix error path during early mount	2008-05-14 19:23:27 -05:00
802	…
8021q	vlan: Use bitmask of feature flags instead of seperate feature bits	2008-05-23 00:27:50 -07:00
appletalk	…
atm	Revert "atm: Do not free already unregistered net device."	2008-05-06 00:00:16 -07:00
ax25	ax25: Fix NULL pointer dereference and lockup.	2008-06-03 14:53:46 -07:00
bluetooth	bluetooth: rfcomm_dev_state_change deadlock fix	2008-06-03 14:27:17 -07:00
bridge	bridge: Consolidate error paths in br_add_bridge().	2008-05-04 17:58:07 -07:00
can	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6	2008-05-08 19:03:26 -07:00
core	tcp: Fix for race due to temporary drop of the socket lock in skb_splice_bits.	2008-06-04 15:45:58 -07:00
dccp	dccp ccid-3: Fix "t_ipi explosion" bug	2008-05-27 06:33:54 -07:00
decnet	ip: Use inline function dst_metric() instead of direct access to dst->metric[]	2008-05-04 22:14:42 -07:00
econet	net: Allow netdevices to specify needed head/tailroom	2008-05-12 20:48:31 -07:00
ethernet	…
ieee80211	…
ipv4	asn1: additional sanity checking during BER decoding	2008-06-05 14:24:54 -07:00
ipv6	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6	2008-06-04 17:39:33 -07:00
ipx	…
irda	irda: Sock leak on error path in irda_create.	2008-06-03 15:18:36 -07:00
iucv	…
key	af_key: Fix selector family initialization.	2008-05-21 13:26:11 -07:00
lapb	…
llc	llc: Fix double accounting of received packets	2008-05-30 02:57:29 -07:00
mac80211	mac80211: fix alignment issue with compare_ether_addr()	2008-05-28 16:43:50 -04:00
netfilter	netfilter: xt_connlimit: fix accouning when receive RST packet in ESTABLISHED state	2008-06-04 09:57:51 -07:00
netlabel	Audit: collect sessionid in netlink messages	2008-04-28 06:18:03 -04:00
netlink	netlink: Improve returned error codes	2008-06-03 16:36:54 -07:00
netrom	…
packet	net: Allow netdevices to specify needed head/tailroom	2008-05-12 20:48:31 -07:00
rfkill	rfkill: Fix device type check when toggling states	2008-04-15 15:04:35 -04:00
rose	rose: Wrong list_lock argument in rose_node seqops	2008-05-02 17:03:22 -07:00
rxrpc	net: Add missing braces to multi-statement if()s	2008-05-02 16:20:10 -07:00
sched	netlink: Improve returned error codes	2008-06-03 16:36:54 -07:00
sctp	sctp: Fix ECN markings for IPv6	2008-06-04 12:40:15 -07:00
sunrpc	Merge branch 'for-2.6.26' of git://linux-nfs.org/~bfields/linux	2008-05-20 19:30:54 -07:00
tipc	tipc: Increase buffer header to support worst-case device	2008-05-08 21:38:24 -07:00
unix	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6	2008-04-24 08:40:34 -07:00
wanrouter	…
wireless	netlink: Improve returned error codes	2008-06-03 16:36:54 -07:00
x25	…
xfrm	xfrm: xfrm_algo: correct usage of RIPEMD-160	2008-06-04 12:04:55 -07:00
Kconfig	…
Makefile	…
TUNABLE	…
compat.c	net: Add compat support for getsockopt (MCAST_MSFILTER)	2008-04-29 03:23:22 -07:00
nonet.c	…
socket.c	net: Unexport move_addr_to_{kernel,user}	2008-04-23 03:37:49 -07:00
sysctl_net.c	net: fix returning void-valued expression warnings	2008-05-01 02:47:38 -07:00