Sergey Popovich a8951d5814 netfilter: Fix potential use after free in ip6_route_me_harder() ...

Dst is released one line before we access it again with dst->error.

Fixes: 58e35d147128 netfilter: ipv6: propagate routing errors from
ip6_route_me_harder()

Signed-off-by: Sergey Popovich <popovich_sergei@mail.ru>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2014-05-09 02:36:39 +02:00

..

netfilter

net: ipv6: more places need LOOPBACK_IFINDEX for flowi6_iif

2014-04-28 14:47:03 -04:00

addrconf_core.c

…

addrconf.c

ipv6: move DAD and addrconf_verify processing to workqueue

2014-03-28 16:54:50 -04:00

addrlabel.c

ipv6:fix checkpatch errors with assignment in if condition

2014-02-17 16:57:29 -05:00

af_inet6.c

ipv6: add flowlabel_consistency sysctl

2014-01-19 17:12:31 -08:00

ah6.c

ah6: Use the IPsec protocol multiplexer API

2014-03-14 07:28:07 +01:00

anycast.c

ipv6: enable anycast addresses as source addresses for datagrams

2014-01-22 21:57:05 -08:00

datagram.c

ipv6: enable anycast addresses as source addresses for datagrams

2014-01-22 21:57:05 -08:00

esp6.c

esp6: Use the IPsec protocol multiplexer API

2014-03-14 07:28:07 +01:00

exthdrs_core.c

ipv6: ipv6_find_hdr restore prev functionality

2014-02-27 18:27:26 -05:00

exthdrs_offload.c

ipv6: Fix exthdrs offload registration.

2014-03-06 16:35:55 -05:00

exthdrs.c

…

fib6_rules.c

ipv6: move IPV6_TCLASS_SHIFT into ipv6.h and define a helper

2014-01-15 15:53:18 -08:00

icmp.c

ipv6: some ipv6 statistic counters failed to disable bh

2014-03-31 16:38:12 -04:00

inet6_connection_sock.c

ipv4: add a sock pointer to ip_queue_xmit()

2014-04-15 12:58:34 -04:00

inet6_hashtables.c

inet: convert inet_ehash_secret and ipv6_hash_secret to net_get_random_once

2013-10-19 19:45:35 -04:00

ip6_checksum.c

ipv6: log src and dst along with "udp checksum is 0"

2014-02-26 15:46:25 -05:00

ip6_fib.c

ipv6: fib: fix fib dump restart

2014-04-24 17:19:25 -04:00

ip6_flowlabel.c

ipv6: remove some unused include in flowlabel

2014-02-18 18:11:05 -05:00

ip6_gre.c

ip6_gre: don't allow to remove the fb_tunnel_dev

2014-04-15 14:56:19 -04:00

ip6_icmp.c

…

ip6_input.c

net: Fix memory leak if TPROXY used with TCP early demux

2014-01-27 16:22:11 -08:00

ip6_offload.c

ipv4: ipv6: better estimate tunnel header cut for correct ufo handling

2014-02-25 18:27:06 -05:00

ip6_offload.h

…

ip6_output.c

ipv4: add a sock pointer to dst->output() path.

2014-04-15 13:47:15 -04:00

ip6_tunnel.c

ip6_tunnel: use the right netns in ioctl handler

2014-04-16 15:16:02 -04:00

ip6_vti.c

vti6: Enable namespace changing

2014-03-14 07:28:09 +01:00

ip6mr.c

net: ipv6: more places need LOOPBACK_IFINDEX for flowi6_iif

2014-04-28 14:47:03 -04:00

ipcomp6.c

ipcomp6: Use the IPsec protocol multiplexer API

2014-03-14 07:28:07 +01:00

ipv6_sockglue.c

ipv6: yet another new IPV6_MTU_DISCOVER option IPV6_PMTUDISC_OMIT

2014-02-26 15:51:01 -05:00

Kconfig

ip6_vti: Fix build when NET_IP_TUNNEL is not set.

2014-02-20 14:29:49 +01:00

Makefile

xfrm6: Add IPsec protocol multiplexer

2014-03-14 07:28:07 +01:00

mcast.c

ipv6: some ipv6 statistic counters failed to disable bh

2014-03-31 16:38:12 -04:00

mip6.c

ipv4/ipv6: Fix FSF address in file headers

2013-12-06 12:37:56 -05:00

ndisc.c

neigh: use tbl->family to distinguish ipv4 from ipv6

2013-12-09 20:56:12 -05:00

netfilter.c

netfilter: Fix potential use after free in ip6_route_me_harder()

2014-05-09 02:36:39 +02:00

output_core.c

ipv6: strengthen fallback fragmentation id generation

2014-03-31 16:33:38 -04:00

ping.c

ipv6: some ipv6 statistic counters failed to disable bh

2014-03-31 16:38:12 -04:00

proc.c

…

protocol.c

net: remove outdated comment for ipv4 and ipv6 protocol handler

2013-11-28 18:47:51 -05:00

raw.c

ipv6: protect protocols not handling ipv4 from v4 connection/bind attempts

2014-01-21 16:59:19 -08:00

reassembly.c

ipv6: split inet6_hash_frag for netfilter and initialize secrets with net_get_random_once

2013-10-23 17:01:40 -04:00

route.c

net: ipv6: more places need LOOPBACK_IFINDEX for flowi6_iif

2014-04-28 14:47:03 -04:00

sit.c

sit: use the right netns in ioctl handler

2014-04-16 15:16:02 -04:00

syncookies.c

net: Remove FLOWI_FLAG_CAN_SLEEP

2013-12-06 07:24:39 +01:00

sysctl_net_ipv6.c

ipv6: add flowlabel_consistency sysctl

2014-01-19 17:12:31 -08:00

tcp_ipv6.c

net: ipv6: Fix oif in TCP SYN+ACK route lookup.

2014-04-11 16:43:47 -04:00

tcpv6_offload.c

net-gro: Prepare GRO stack for the upcoming tunneling support

2013-12-12 13:47:53 -05:00

tunnel6.c

ipv4/ipv6: Fix FSF address in file headers

2013-12-06 12:37:56 -05:00

udp_impl.h

net: ipv4/ipv6: Remove extern from function prototypes

2013-10-19 19:12:11 -04:00

udp_offload.c

ipv6: reuse ip6_frag_id from ip6_ufo_append_data

2014-02-22 00:28:21 -05:00

udp.c

ipv6: make IPV6_RECVPKTINFO work for ipv4 datagrams

2014-01-19 19:53:18 -08:00

udplite.c

…

xfrm6_input.c

…

xfrm6_mode_beet.c

…

xfrm6_mode_ro.c

ipv4/ipv6: Fix FSF address in file headers

2013-12-06 12:37:56 -05:00

xfrm6_mode_transport.c

…

xfrm6_mode_tunnel.c

xfrm6: Remove xfrm_tunnel_notifier

2014-03-14 07:28:08 +01:00

xfrm6_output.c

ipv4: add a sock pointer to dst->output() path.

2014-04-15 13:47:15 -04:00

xfrm6_policy.c

xfrm6: Add IPsec protocol multiplexer

2014-03-14 07:28:07 +01:00

xfrm6_protocol.c

xfrm6: Add IPsec protocol multiplexer

2014-03-14 07:28:07 +01:00

xfrm6_state.c

…

xfrm6_tunnel.c

ipv4/ipv6: Fix FSF address in file headers

2013-12-06 12:37:56 -05:00