Marcelo Ricardo Leitner 6ef81a5c0e sctp: add size validation when walking chunks ... [ Upstream commit 50619dbf8db77e98d821d615af4f634d08e22698 ] The first chunk in a packet is ensured to be present at the beginning of sctp_rcv(), as a packet needs to have at least 1 chunk. But the second one, may not be completely available and ch->length can be over uninitialized memory. Fix here is by only trying to walk on the next chunk if there is enough to hold at least the header, and then proceed with the ch->length validation that is already there. Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com> Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>		2021-07-19 09:44:55 +02:00
..
associola.c	net: sctp: associola.c: delete duplicated words	2020-08-24 16:21:43 -07:00
auth.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-10-08 15:44:50 -07:00
bind_addr.c	sctp: validate from_addr_param return	2021-07-19 09:44:55 +02:00
chunk.c	net: sctp: chunk.c: delete duplicated word	2020-08-24 16:21:43 -07:00
debug.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
diag.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-03-12 22:34:48 -07:00
endpointola.c	sctp: get netns from asoc and ep base	2019-12-09 20:14:01 -08:00
input.c	sctp: add size validation when walking chunks	2021-07-19 09:44:55 +02:00
inqueue.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
ipv6.c	sctp: validate from_addr_param return	2021-07-19 09:44:55 +02:00
Kconfig	treewide: replace '---help---' in Kconfig files with 'help'	2020-06-14 01:57:21 +09:00
Makefile	sctp: rename sctp_diag.c as diag.c	2018-02-13 13:56:31 -05:00
objcnt.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
offload.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-06-07 11:00:14 -07:00
output.c	sctp: get netns from asoc and ep base	2019-12-09 20:14:01 -08:00
outqueue.c	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
primitive.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
proc.c	net: fix iteration for sctp transport seq_files	2021-02-17 11:02:29 +01:00
protocol.c	sctp: validate from_addr_param return	2021-07-19 09:44:55 +02:00
sm_make_chunk.c	sctp: validate from_addr_param return	2021-07-19 09:44:55 +02:00
sm_sideeffect.c	sctp: change to hold/put transport for proto_unreach_timer	2020-11-14 11:57:12 -08:00
sm_statefuns.c	sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b	2021-05-19 10:13:06 +02:00
sm_statetable.c	sctp: remove net sctp.x_enable working as a global switch	2019-08-19 18:27:29 -07:00
socket.c	sctp: delay auto_asconf init until binding the first addr	2021-05-14 09:50:46 +02:00
stream_interleave.c	sctp: get netns from asoc and ep base	2019-12-09 20:14:01 -08:00
stream_sched_prio.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
stream_sched_rr.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
stream_sched.c	sctp: rename asoc intl_enable to asoc peer.intl_capable	2019-07-08 20:16:25 -07:00
stream.c	net: sctp: Fix negotiation of the number of data streams.	2020-08-20 16:37:37 -07:00
sysctl.c	sysctl: pass kernel pointers to ->proc_handler	2020-04-27 02:07:40 -04:00
transport.c	sctp: change to hold/put transport for proto_unreach_timer	2020-11-14 11:57:12 -08:00
tsnmap.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
ulpevent.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-05-31 17:48:46 -07:00
ulpqueue.c	net: sctp: ulpqueue.c: delete duplicated word	2020-08-24 16:21:43 -07:00