redonkable
/
alistair23-linux
1
0
Fork 0
Code Releases Activity
alistair23-linux/net/netfilter
History
James Morris a280b89982 [SECURITY] secmark: nul-terminate secdata 
The patch below fixes a problem in the iptables SECMARK target, where
the user-supplied 'selctx' string may not be nul-terminated.

From initial analysis, it seems that the strlen() called from
selinux_string_to_sid() could run until it arbitrarily finds a zero,
and possibly cause a kernel oops before then.

The impact of this appears limited because the operation requires
CAP_NET_ADMIN, which is essentially always root.  Also, the module is
not yet in wide use.

Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: David S. Miller <davem@davemloft.net>
 		2006-08-02 13:38:23 -07:00
..
Kconfig [NETFILTER]: Demote xt_sctp to EXPERIMENTAL 2006-07-24 22:55:29 -07:00
Makefile [SECMARK]: Add CONNSECMARK xtables target 2006-06-17 21:30:03 -07:00
core.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
nf_conntrack_core.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
nf_conntrack_ftp.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
nf_conntrack_l3proto_generic.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
nf_conntrack_netlink.c [NETFILTER]: nf_conntrack: Fix undefined references to local_bh_* 2006-06-29 16:57:42 -07:00
nf_conntrack_proto_generic.c [NETFILTER]: Fix timeout sysctls on big-endian 64bit architectures 2006-01-10 12:54:35 -08:00
nf_conntrack_proto_sctp.c [NETFILTER]: SCTP conntrack: fix crash triggered by packet without chunks 2006-06-30 14:12:01 -07:00
nf_conntrack_proto_tcp.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
nf_conntrack_proto_udp.c [NETFILTER]: conntrack: add sysctl to disable checksumming 2006-06-17 21:28:57 -07:00
nf_conntrack_standalone.c [NETFILTER]: conntrack: fix SYSCTL=n compile 2006-07-24 22:53:12 -07:00
nf_internals.h Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
nf_log.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
nf_queue.c [NETFILTER]: nf_queue: handle NF_STOP and unknown verdicts in nf_reinject 2006-07-24 22:52:47 -07:00
nf_sockopt.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
nfnetlink.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
nfnetlink_log.c [NETFILTER]: nfnetlink_log: fix byteorder confusion 2006-05-19 02:17:18 -07:00
nfnetlink_queue.c [NETFILTER]: ip_queue/nfnetlink_queue: drop bridge port references when dev disappears 2006-06-29 16:57:48 -07:00
x_tables.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
xt_CLASSIFY.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_CONNMARK.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_CONNSECMARK.c [SECMARK]: Add CONNSECMARK xtables target 2006-06-17 21:30:03 -07:00
xt_MARK.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_NFQUEUE.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_NOTRACK.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_SECMARK.c [SECURITY] secmark: nul-terminate secdata 2006-08-02 13:38:23 -07:00
xt_comment.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_connbytes.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_connmark.c [NETFILTER]: x_tables: remove some unnecessary casts 2006-06-17 21:28:45 -07:00
xt_conntrack.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_dccp.c [NETFILTER]: x_tables: remove some unnecessary casts 2006-06-17 21:28:45 -07:00
xt_esp.c [NETFILTER]: x_tables: unify IPv4/IPv6 esp match 2006-04-01 02:22:30 -08:00
xt_helper.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_length.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_limit.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_mac.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_mark.c [NETFILTER]: x_tables: remove some unnecessary casts 2006-06-17 21:28:45 -07:00
xt_multiport.c [NETFILTER]: x_tables: add SCTP/DCCP support where missing 2006-06-17 21:28:47 -07:00
xt_physdev.c [NETFILTER]: bridge netfilter: add deferred output hooks to feature-removal-schedule 2006-07-24 22:54:55 -07:00
xt_pkttype.c [NETFILTER]: xt_pkttype: fix mismatches on locally generated packets 2006-07-24 22:54:14 -07:00
xt_policy.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
xt_quota.c [NETFILTER]: x_tables: add quota match 2006-06-17 21:28:49 -07:00
xt_realm.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_sctp.c [NETFILTER]: xt_sctp: fix --chunk-types matching 2006-06-29 16:57:46 -07:00
xt_state.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_statistic.c [NETFILTER]: x_tables: add statistic match 2006-06-17 21:28:51 -07:00
xt_string.c [NETFILTER]: x_tables: remove some unnecessary casts 2006-06-17 21:28:45 -07:00
xt_tcpmss.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_tcpudp.c [NETFILTER]: xt_tcpudp: fix double unregistration in error path 2006-06-29 16:57:44 -07:00