Mohamed Ghannam 7e2fb808d3 dccp: CVE-2017-8824: use-after-free in DCCP code ... commit 69c64866ce upstream. Whenever the sock object is in DCCP_CLOSED state, dccp_disconnect() must free dccps_hc_tx_ccid and dccps_hc_rx_ccid and set to NULL. Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com> Reviewed-by: Eric Dumazet <edumazet@google.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-02-17 13:21:13 +01:00
..
ccids	dccp: don't restart ccid2_hc_tx_rto_expire() if sk in closed state	2018-01-31 12:55:53 +01:00
Kconfig	net/dccp: remove depends on CONFIG_EXPERIMENTAL	2013-01-11 11:39:34 -08:00
Makefile	dccp: Policy-based packet dequeueing infrastructure	2010-12-07 13:47:12 +01:00
ackvec.c	dccp: drop null test before destroy functions	2015-09-15 16:49:43 -07:00
ackvec.h	net: dccp: Remove extern from function prototypes	2013-10-19 19:12:11 -04:00
ccid.c	dccp: drop null test before destroy functions	2015-09-15 16:49:43 -07:00
ccid.h	net: dccp: Remove extern from function prototypes	2013-10-19 19:12:11 -04:00
dccp.h	net: snmp: kill STATS_BH macros	2016-04-27 22:48:25 -04:00
diag.c	sock_diag: specify info_size per inet protocol	2015-06-15 19:49:22 -07:00
feat.c	dccp: fix a memleak for dccp_feat_init err process	2017-08-11 08:49:33 -07:00
feat.h	net: dccp: Remove extern from function prototypes	2013-10-19 19:12:11 -04:00
input.c	tcp/dccp: block BH for SYN processing	2017-03-22 12:43:32 +01:00
ipv4.c	tcp/dccp: fix other lockdep splats accessing ireq_opt	2017-11-18 11:22:22 +01:00
ipv6.c	dccp: fix a memleak that dccp_ipv6 doesn't put reqsk properly	2017-08-11 08:49:33 -07:00
ipv6.h	inet: includes a sock_common in request_sock	2013-10-10 00:08:07 -04:00
minisocks.c	tcp/dccp: block bh before arming time_wait timer	2017-12-16 16:25:46 +01:00
options.c	dccp: do not assume DCCP code is non preemptible	2016-05-02 17:02:25 -04:00
output.c	net: Generalise wq_has_sleeper helper	2015-11-30 14:47:33 -05:00
probe.c	Use 64-bit timekeeping	2015-11-01 17:01:16 -05:00
proto.c	dccp: CVE-2017-8824: use-after-free in DCCP code	2018-02-17 13:21:13 +01:00
qpolicy.c	dccp qpolicy: Parameter checking of cmsg qpolicy parameters	2010-12-07 13:47:12 +01:00
sysctl.c	dccp: make the request_retries minimum is 1	2014-05-14 15:34:16 -04:00
timer.c	net: rename NET_{ADD|INC}_STATS_BH()	2016-04-27 22:48:24 -04:00