Eric Dumazet 96296cddf9 netlabel: out of bound access in cipso_v4_validate() ...

commit d71b7896886345c53ef1d84bda2bc758554f5d61 upstream.

syzkaller found another out of bound access in ip_options_compile(),
or more exactly in cipso_v4_validate()

Fixes: 20e2a86485 ("cipso: handle CIPSO options correctly when NetLabel is disabled")
Fixes: 446fda4f26 ("[NetLabel]: CIPSOv4 engine")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Dmitry Vyukov  <dvyukov@google.com>
Cc: Paul Moore <paul@paul-moore.com>
Acked-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Willy Tarreau <w@1wt.eu>

2017-06-08 00:46:58 +02:00

..

acpi

ACPICA: Tables: Fix an issue that FACS initialization is performed twice

2015-08-03 09:29:46 -07:00

asm-generic

asm-generic: make copy_from_user() zero the destination properly

2017-02-06 23:33:01 +01:00

clocksource

…

crypto

crypto: crypto_memneq - add equality testing of memory regions w/o timing leaks

2017-06-08 00:46:46 +02:00

drm

drm/radeon: add new OLAND pci id

2015-09-13 09:07:59 -07:00

dt-bindings

…

keys

…

linux

gro: Disable frag0 optimization on IPv6 ext headers

2017-06-08 00:46:54 +02:00

math-emu

…

media

…

memory

…

misc

…

net

netlabel: out of bound access in cipso_v4_validate()

2017-06-08 00:46:58 +02:00

pcmcia

…

ras

…

rdma

IB/security: Restrict use of the write() interface

2016-08-27 11:40:21 +02:00

rxrpc

…

scsi

…

sound

ASoC: wm8904: Correct number of EQ registers

2015-11-09 10:12:58 -08:00

target

…

trace

…

uapi

linux/const.h: Add _BITUL() and _BITULL()

2016-06-07 10:42:44 +02:00

video

…

xen

xen: Add RING_COPY_REQUEST()

2017-02-06 09:04:07 +01:00

Kbuild

…