Marcelo Ricardo Leitner 2f4b67bceb sctp: add param size validation for SCTP_PARAM_SET_PRIMARY ... commit ef6c8d6ccf0c1dccdda092ebe8782777cd7803c9 upstream. When SCTP handles an INIT chunk, it calls for example: sctp_sf_do_5_1B_init sctp_verify_init sctp_verify_param sctp_process_init sctp_process_param handling of SCTP_PARAM_SET_PRIMARY sctp_verify_init() wasn't doing proper size validation and neither the later handling, allowing it to work over the chunk itself, possibly being uninitialized memory. Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-09-26 14:07:07 +02:00
..
Kconfig	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
Makefile	sctp: rename sctp_diag.c as diag.c	2018-02-13 13:56:31 -05:00
associola.c	sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket	2020-06-30 15:36:45 -04:00
auth.c	sctp: move the active_key update after sh_keys is added	2021-08-12 13:20:57 +02:00
bind_addr.c	sctp: validate from_addr_param return	2021-07-19 08:53:13 +02:00
chunk.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
debug.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
diag.c	inet_diag: return classid for all socket types	2020-03-18 07:17:38 +01:00
endpointola.c	sctp: cache netns in sctp_ep_common	2019-12-04 22:30:57 +01:00
input.c	sctp: validate chunk size in __rcv_asconf_lookup	2021-09-26 14:07:07 +02:00
inqueue.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
ipv6.c	sctp: validate from_addr_param return	2021-07-19 08:53:13 +02:00
objcnt.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
offload.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-06-07 11:00:14 -07:00
output.c	sctp: count data bundling sack chunk for outctrlchunks	2019-07-03 11:41:24 -07:00
outqueue.c	sctp: move trace_sctp_probe_path into sctp_outq_sack	2020-10-01 13:17:27 +02:00
primitive.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
proc.c	net: fix iteration for sctp transport seq_files	2021-02-17 10:35:19 +01:00
protocol.c	sctp: move 198 addresses from unusable to private scope	2021-07-31 08:19:38 +02:00
sm_make_chunk.c	sctp: add param size validation for SCTP_PARAM_SET_PRIMARY	2021-09-26 14:07:07 +02:00
sm_sideeffect.c	sctp: change to hold/put transport for proto_unreach_timer	2020-11-24 13:28:59 +01:00
sm_statefuns.c	sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b	2021-05-19 10:08:27 +02:00
sm_statetable.c	sctp: remove net sctp.x_enable working as a global switch	2019-08-19 18:27:29 -07:00
socket.c	sctp: delay auto_asconf init until binding the first addr	2021-05-14 09:44:33 +02:00
stream.c	net: sctp: Fix negotiation of the number of data streams.	2020-09-03 11:26:40 +02:00
stream_interleave.c	sctp: rename asoc intl_enable to asoc peer.intl_capable	2019-07-08 20:16:25 -07:00
stream_sched.c	sctp: rename asoc intl_enable to asoc peer.intl_capable	2019-07-08 20:16:25 -07:00
stream_sched_prio.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
stream_sched_rr.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
sysctl.c	sctp: allow users to set netns ecn flag with sysctl	2019-08-27 20:54:14 -07:00
transport.c	sctp: change to hold/put transport for proto_unreach_timer	2020-11-24 13:28:59 +01:00
tsnmap.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
ulpevent.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00
ulpqueue.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 104	2019-05-24 17:39:00 +02:00