Steffen Klassert dffe655ddb xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems ... commit 19d7df69fd upstream. We don't have a compat layer for xfrm, so userspace and kernel structures have different sizes in this case. This results in a broken configuration, so refuse to configure socket policies when trying to insert from 32 bit userspace as we do it already with policies inserted via netlink. Reported-and-tested-by: syzbot+e1a1577ca8bcb47b769a@syzkaller.appspotmail.com Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-04-08 14:26:29 +02:00
..
Kconfig	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next	2017-02-16 21:25:49 -05:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfrm_algo.c	xfrm: use IS_ENABLED() instead of checking for built-in or module	2016-09-10 21:19:11 -07:00
xfrm_device.c	xfrm: Fix negative device refcount on offload failure.	2017-09-11 10:36:51 +02:00
xfrm_hash.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfrm_hash.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfrm_input.c	xfrm: Reinject transport-mode packets through tasklet	2018-03-03 10:24:25 +01:00
xfrm_ipcomp.c	net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()	2018-04-08 14:26:29 +02:00
xfrm_output.c	xfrm: Fix GSO for IPsec with GRE tunnel.	2017-10-31 09:20:35 +01:00
xfrm_policy.c	net: xfrm: allow clearing socket xfrm policies.	2018-03-19 08:42:49 +01:00
xfrm_proc.c	proc: Reduce cache miss in xfrm_statistics_seq_show	2016-09-30 01:50:45 -04:00
xfrm_replay.c	xfrm: Fix xfrm_replay_overflow_offload_esn	2018-03-19 08:42:50 +01:00
xfrm_state.c	xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems	2018-04-08 14:26:29 +02:00
xfrm_sysctl.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfrm_user.c	xfrm_user: uncoditionally validate esn replay attribute struct	2018-04-08 14:26:28 +02:00