Yohei Kanemaru c630ec8bda ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation ...

[ Upstream commit ef489749aa ]

skb->cb may contain data from previous layers (in an observed case
IPv4 with L3 Master Device). In the observed scenario, the data in
IPCB(skb)->frags was misinterpreted as IP6CB(skb)->frag_max_size,
eventually caused an unexpected IPv6 fragmentation in ip6_fragment()
through ip6_finish_output().

This patch clears IP6CB(skb), which potentially contains garbage data,
on the SRH ip4ip6 encapsulation.

Fixes: 32d99d0b67 ("ipv6: sr: add support for ip4ip6 encapsulation")
Signed-off-by: Yohei Kanemaru <yohei.kanemaru@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-02-06 17:31:31 +01:00

..

ila

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

netfilter

ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changes

2018-12-17 09:28:45 +01:00

addrconf_core.c

Ipvlan should return an error when an address is already in use.

2017-06-09 12:26:07 -04:00

addrconf.c

net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs

2018-11-04 14:52:48 +01:00

addrlabel.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

af_inet6.c

ipv6: Consider sk_bound_dev_if when binding a socket to an address

2019-02-06 17:31:31 +01:00

ah6.c

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next

2017-06-23 14:17:31 -04:00

anycast.c

net, ipv6: convert ifacaddr6.aca_refcnt from atomic_t to refcount_t

2017-07-04 01:29:04 -07:00

calipso.c

ipv6: make ipv6_renew_options() interrupt/kernel safe

2018-08-24 13:09:13 +02:00

datagram.c

ip: on queued skb use skb_header_pointer instead of pskb_may_pull

2019-01-23 08:09:47 +01:00

esp6_offload.c

esp: Fix GRO when the headers not fully in the linear part of the skb.

2018-02-25 11:07:46 +01:00

esp6.c

esp6: fix memleak on error path in esp6_input

2018-09-05 09:26:23 +02:00

exthdrs_core.c

ipv6: constify the skb pointer of ipv6_find_tlv().

2016-06-27 15:06:15 -04:00

exthdrs_offload.c

ipv6: fix exthdrs offload registration in out_rt path

2015-09-02 15:31:00 -07:00

exthdrs.c

ipv6: make ipv6_renew_options() interrupt/kernel safe

2018-08-24 13:09:13 +02:00

fib6_notifier.c

net: Add module reference to FIB notifiers

2017-09-01 20:33:42 -07:00

fib6_rules.c

net: ipv6: avoid overhead when no custom FIB rules are installed

2017-08-08 21:40:08 -07:00

fou6.c

fou: make local function static

2017-05-21 13:42:36 -04:00

icmp.c

net/ipv6: Fix linklocal to global address with VRF

2018-07-28 07:55:42 +02:00

inet6_connection_sock.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-01-28 10:33:06 -05:00

inet6_hashtables.c

net/tcp: Fix socket lookups with SO_BINDTODEVICE

2018-07-22 14:28:46 +02:00

ip6_checksum.c

net: udp: fix handling of CHECKSUM_COMPLETE packets

2018-11-04 14:52:49 +01:00

ip6_fib.c

ipv6: fix typo in fib6_net_exit()

2017-09-08 16:09:04 -07:00

ip6_flowlabel.c

ipv6: flowlabel: do not leave opt->tot_len with garbage

2017-10-22 03:22:24 +01:00

ip6_gre.c

ip6_gre: better validate user provided tunnel names

2018-04-12 12:32:25 +02:00

ip6_icmp.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

ip6_input.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-04-20 10:35:33 -04:00

ip6_offload.c

gso_segment: Reset skb->mac_len after modifying network header

2018-09-29 03:06:00 -07:00

ip6_offload.h

udp: Add GRO functions to UDP socket

2016-04-07 16:53:29 -04:00

ip6_output.c

ipv6: Check available headroom in ip6_xmit() even without options

2018-12-17 09:28:45 +01:00

ip6_tunnel.c

ipv6: tunnels: fix two use-after-free

2019-01-09 17:14:43 +01:00

ip6_udp_tunnel.c

ipv6: explicitly initialize udp6_addr in udp_sock_create6()

2019-01-09 17:14:43 +01:00

ip6_vti.c

ipv6: tunnels: fix two use-after-free

2019-01-09 17:14:43 +01:00

ip6mr.c

ip6mr: Fix potential Spectre v1 vulnerability

2019-01-09 17:14:43 +01:00

ipcomp6.c

net: inet: Support UID-based routing in IP protocols.

2016-11-04 14:45:23 -04:00

ipv6_sockglue.c

ipv6: make ipv6_renew_options() interrupt/kernel safe

2018-08-24 13:09:13 +02:00

Kconfig

ipv6: ila: select CONFIG_DST_CACHE

2018-07-25 11:25:09 +02:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mcast_snoop.c

…

mcast.c

ipv6: mcast: fix a use-after-free in inet6_mc_check

2018-11-04 14:52:48 +01:00

mip6.c

ktime: Get rid of ktime_equal()

2016-12-25 17:21:23 +01:00

ndisc.c

ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called

2018-11-04 14:52:48 +01:00

netfilter.c

netfilter: ipv6: Preserve link scope traffic original oif

2018-12-17 09:28:51 +01:00

output_core.c

net: accept UFO datagrams from tuntap and packet

2017-12-17 15:07:58 +01:00

ping.c

net: ping: do not abuse udp_poll()

2017-06-04 22:56:55 -04:00

proc.c

inet: frags: break the 2GB limit for frags storage

2018-09-19 22:43:46 +02:00

protocol.c

net: Add sysctl to toggle early demux for tcp and udp

2017-03-24 13:17:07 -07:00

raw.c

ipv6: take rcu lock in rawv6_send_hdrinc()

2018-10-18 09:16:17 +02:00

reassembly.c

ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changes

2018-12-17 09:28:45 +01:00

route.c

ipv6: Fix PMTU updates for UDP/raw sockets in presence of VRF

2018-11-23 08:19:25 +01:00

seg6_hmac.c

ipv6: sr: fix passing wrong flags to crypto_alloc_shash()

2018-07-22 14:28:43 +02:00

seg6_iptunnel.c

ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation

2019-02-06 17:31:31 +01:00

seg6_local.c

ipv6: sr: remove duplicate routing header type check

2017-09-11 14:34:10 -07:00

seg6.c

ipv6: sr: define core operations for seg6local lightweight tunnel

2017-08-07 14:16:22 -07:00

sit.c

ip6_tunnel: remove magic mtu value 0xFFF8

2018-06-11 22:49:19 +02:00

syncookies.c

ipv4: ipv6: initialize treq->txhash in cookie_v[46]_check()

2017-07-18 11:22:51 -07:00

sysctl_net_ipv6.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

tcp_ipv6.c

net/ipv6: Fix linklocal to global address with VRF

2018-07-28 07:55:42 +02:00

tcpv6_offload.c

gso: validate gso_type in GSO handlers

2018-01-31 14:03:47 +01:00

tunnel6.c

ipv6: fix tunnel error handling

2015-11-03 10:52:13 -05:00

udp_impl.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

udp_offload.c

gso: validate gso_type in GSO handlers

2018-01-31 14:03:47 +01:00

udp.c

udp6: fix encap return code for resubmitting

2018-11-04 14:52:49 +01:00

udplite.c

udplite: call proper backlog handlers

2016-11-24 15:32:14 -05:00

xfrm6_input.c

xfrm: reset transport header back to network header after all input transforms ahave been applied

2018-11-04 14:52:37 +01:00

xfrm6_mode_beet.c

networking: make skb_pull & friends return void pointers

2017-06-16 11:48:39 -04:00

xfrm6_mode_ro.c

ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()

2017-06-02 13:57:27 -04:00

xfrm6_mode_transport.c

xfrm: reset transport header back to network header after all input transforms ahave been applied

2018-11-04 14:52:37 +01:00

xfrm6_mode_tunnel.c

xfrm: Add encapsulation header offsets while SKB is not encrypted

2017-04-14 10:07:39 +02:00

xfrm6_output.c

xfrm6: call kfree_skb when skb is toobig

2018-11-04 14:52:37 +01:00

xfrm6_policy.c

xfrm6: avoid potential infinite loop in _decode_session6()

2018-07-08 15:30:51 +02:00

xfrm6_protocol.c

xfrm: input: constify xfrm_input_afinfo

2017-02-09 10:22:17 +01:00

xfrm6_state.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm6_tunnel.c

net, ipv6: convert xfrm6_tunnel_spi.refcnt from atomic_t to refcount_t

2017-07-04 01:29:04 -07:00