Pablo Neira Ayuso 9f57771d09 netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code ...

commit 4c559f15ef upstream.

Dan Carpenter says: "Smatch complains that the value for "cmd" comes
from the network and can't be trusted."

Add pptp_msg_name() helper function that checks for the array boundary.

Fixes: f09943fefe ("[NETFILTER]: nf_conntrack/nf_nat: add PPTP helper port")
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2020-06-03 08:21:35 +02:00

..

arp_tables.c

netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct

2020-01-23 08:22:47 +01:00

arpt_mangle.c

netfilter: ipv4: prefer skb_ensure_writable

2019-05-31 18:02:46 +02:00

arptable_filter.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

ip_tables.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

ipt_ah.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

ipt_CLUSTERIP.c

netfilter: Update obsolete comments referring to ip_conntrack

2019-07-16 13:17:00 +02:00

ipt_ECN.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2019-06-22 08:59:24 -04:00

ipt_REJECT.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

ipt_rpfilter.c

netfilter: Fix rpfilter dropping vrf packets by mistake

2019-07-16 13:16:47 +02:00

ipt_SYNPROXY.c

netfilter: synproxy: rename mss synproxy_options field

2019-08-03 18:39:08 +02:00

iptable_filter.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

iptable_mangle.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

iptable_nat.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

iptable_raw.c

Update my email address

2019-06-10 13:00:24 +02:00

iptable_security.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

Kconfig

netfilter: fix coding-style errors.

2019-09-13 11:39:38 +02:00

Makefile

netfilter: fix coding-style errors.

2019-09-13 11:39:38 +02:00

nf_defrag_ipv4.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

nf_dup_ipv4.c

netfilter: drop bridge nf reset from nf_reset

2019-10-01 18:42:15 +02:00

nf_flow_table_ipv4.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

nf_log_arp.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

nf_log_ipv4.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

nf_nat_h323.c

netfilter: nf_conntrack_sip: fix expectation clash

2019-07-16 13:16:59 +02:00

nf_nat_pptp.c

netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code

2020-06-03 08:21:35 +02:00

nf_nat_snmp_basic_main.c

netfilter: ipv4: prefer skb_ensure_writable

2019-05-31 18:02:46 +02:00

nf_nat_snmp_basic.asn1

netfilter: nf_nat_snmp_basic: use asn1 decoder library

2018-01-19 13:59:07 +01:00

nf_reject_ipv4.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

nf_socket_ipv4.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

nf_tproxy_ipv4.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2019-06-22 08:59:24 -04:00

nft_dup_ipv4.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

nft_fib_ipv4.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

nft_reject_ipv4.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00