Lothar Waßmann f7e5cc0c40 net/can bugfix: use after free bug in can protocol drivers ... Fix a use after free bug in can protocol drivers The release functions of the can protocol drivers lack a call to sock_orphan() which leads to referencing freed memory under certain circumstances. This patch fixes a bug reported here: https://lists.berlios.de/pipermail/socketcan-users/2009-July/000985.html Signed-off-by: Lothar Wassmann <LW@KARO-electronics.de> Acked-by: Oliver Hartkopp <oliver@hartkopp.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2009-07-15 11:20:37 -07:00
..
9p	net/9p: Fix crash due to bad mount parameters.	2009-07-02 13:17:01 -07:00
802
8021q
appletalk	net: correct off-by-one write allocations reports	2009-06-18 00:29:12 -07:00
atm	net: adding memory barrier to the poll and receive callbacks	2009-07-09 17:06:57 -07:00
ax25	net: Move rx skb_orphan call to where needed	2009-06-23 16:36:25 -07:00
bluetooth	net: correct off-by-one write allocations reports	2009-06-18 00:29:12 -07:00
bridge	bridge: Use rcu_barrier() instead of syncronize_net() on unload.	2009-06-26 13:51:32 -07:00
can	net/can bugfix: use after free bug in can protocol drivers	2009-07-15 11:20:37 -07:00
core	net: sk_prot_alloc() should not blindly overwrite memory	2009-07-11 20:26:19 -07:00
dcb
dccp	net: adding memory barrier to the poll and receive callbacks	2009-07-09 17:06:57 -07:00
decnet	decnet: Use rcu_barrier() on module unload.	2009-06-26 13:51:27 -07:00
dsa	dsa: fix 88e6xxx statistics counter snapshotting	2009-07-05 18:03:35 -07:00
econet	net: sk_wmem_alloc has initial value of one, not zero	2009-06-17 04:31:25 -07:00
ethernet
ieee802154	nl802154: add module license and description	2009-06-29 18:20:28 +04:00
ipv4	gre: fix ToS/DiffServ inherit bug	2009-07-14 09:35:59 -07:00
ipv6	sit: fix regression: do not release skb->dst before xmit	2009-07-11 20:30:52 -07:00
ipx	net: correct off-by-one write allocations reports	2009-06-18 00:29:12 -07:00
irda	net: Move rx skb_orphan call to where needed	2009-06-23 16:36:25 -07:00
iucv	net: adding memory barrier to the poll and receive callbacks	2009-07-09 17:06:57 -07:00
key	net: correct off-by-one write allocations reports	2009-06-18 00:29:12 -07:00
lapb
llc	net: correct off-by-one write allocations reports	2009-06-18 00:29:12 -07:00
mac80211	mac80211: minstrel: avoid accessing negative indices in rix_to_ndx()	2009-07-07 12:55:28 -04:00
netfilter	netfilter: xtables: conntrack match revision 2	2009-06-29 14:31:46 +02:00
netlabel
netlink	net: correct off-by-one write allocations reports	2009-06-18 00:29:12 -07:00
netrom	net: correct off-by-one write allocations reports	2009-06-18 00:29:12 -07:00
packet	net: correct off-by-one write allocations reports	2009-06-18 00:29:12 -07:00
phonet	Phonet: generate Netlink RTM_DELADDR when destroying a device	2009-06-25 02:58:16 -07:00
rds
rfkill	rfkill: export persistent attribute in sysfs	2009-06-19 11:50:18 -04:00
rose	net: correct off-by-one write allocations reports	2009-06-18 00:29:12 -07:00
rxrpc	net: adding memory barrier to the poll and receive callbacks	2009-07-09 17:06:57 -07:00
sched	net: correct off-by-one write allocations reports	2009-06-18 00:29:12 -07:00
sctp	sctp: fix warning at inet_sock_destruct() while release sctp socket	2009-07-06 12:47:08 -07:00
sunrpc	sunrpc: Use rcu_barrier() on unload.	2009-06-26 13:51:34 -07:00
tipc
unix	net: adding memory barrier to the poll and receive callbacks	2009-07-09 17:06:57 -07:00
wanrouter
wimax	wimax: fix warning caused by not checking retval of rfkill_set_hw_state()	2009-06-11 11:12:48 -07:00
wireless	cfg80211: fix refcount leak	2009-07-07 12:55:28 -04:00
x25	net: correct off-by-one write allocations reports	2009-06-18 00:29:12 -07:00
xfrm	xfrm: use xfrm_addr_cmp() instead of compare addresses directly	2009-06-29 19:41:46 -07:00
compat.c
Kconfig
Makefile
nonet.c
socket.c
sysctl_net.c
TUNABLE