David S. Miller 0a06ea8718 [WIRELESS] WEXT: Fix userspace corruption on 64-bit. ... On 64-bit systems sizeof(struct ifreq) is 8 bytes larger than sizeof(struct iwreq). For GET calls, the wireless extension code copies back into userspace using sizeof(struct ifreq) but userspace and elsewhere only allocates a "struct iwreq". Thus, this copy writes past the end of the iwreq object and corrupts whatever sits after it in memory. Fix the copy_to_user() length. This particularly hurts the compat case because the wireless compat code uses compat_alloc_userspace() and right after this allocated buffer is the current bottom of the user stack, and that's what gets overwritten by the copy_to_user() call. Signed-off-by: David S. Miller <davem@davemloft.net>		2007-11-20 03:29:53 -08:00
..
9p	9p: add missing end-of-options record for trans_fd	2007-11-06 08:02:53 -06:00
802	[NET]: Move hardware header operations out of netdevice.	2007-10-10 16:52:52 -07:00
8021q	[VLAN]: Allow setting mac address while device is up	2007-11-10 21:52:35 -08:00
appletalk	[NET]: Forget the zero_it argument of sk_alloc()	2007-11-01 00:39:31 -07:00
atm	[NET]: Forget the zero_it argument of sk_alloc()	2007-11-01 00:39:31 -07:00
ax25	[NET]: Forget the zero_it argument of sk_alloc()	2007-11-01 00:39:31 -07:00
bluetooth	[NET]: Forget the zero_it argument of sk_alloc()	2007-11-01 00:39:31 -07:00
bridge	[BRIDGE]: Add missing "space"	2007-11-19 23:46:55 -08:00
core	[PKTGEN]: Fix double unlock of xfrm_state->lock	2007-11-19 22:51:24 -08:00
dccp	[DCCP]: Add missing "space"	2007-11-19 23:46:02 -08:00
decnet	[INET]: Small possible memory leak in FIB rules	2007-11-10 22:12:03 -08:00
econet	[NET]: Forget the zero_it argument of sk_alloc()	2007-11-01 00:39:31 -07:00
ethernet	[NET]: Validate device addr prior to interface-up	2007-10-23 21:27:50 -07:00
ieee80211	softmac: fix wext MLME request reason code endianness	2007-11-10 21:58:41 -08:00
ipv4	[IPV4]: Add missing "space"	2007-11-19 23:46:29 -08:00
ipv6	[IPV6]: Add missing "space"	2007-11-19 23:47:25 -08:00
ipx	[IPX]: Use existing sock refcnt debugging infrastructure	2007-11-10 21:39:26 -08:00
irda	[IRDA]: Add missing "space"	2007-11-19 23:48:30 -08:00
iucv	[NET]: Forget the zero_it argument of sk_alloc()	2007-11-01 00:39:31 -07:00
key	[NET]: Forget the zero_it argument of sk_alloc()	2007-11-01 00:39:31 -07:00
lapb	[PATCH] remove many unneeded #includes of sched.h	2007-02-14 08:09:54 -08:00
llc	[NET]: Forget the zero_it argument of sk_alloc()	2007-11-01 00:39:31 -07:00
mac80211	Merge branch 'fixes-davem' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6	2007-11-14 19:44:02 -08:00
netfilter	[NETFILTER]: Fix NULL pointer dereference in nf_nat_move_storage()	2007-11-15 15:52:32 -08:00
netlabel	[NetLabel]: correct usage of RCU locking	2007-10-26 04:29:08 -07:00
netlink	[NET]: Move unneeded data to initdata section.	2007-11-13 03:23:50 -08:00
netrom	[NET]: Forget the zero_it argument of sk_alloc()	2007-11-01 00:39:31 -07:00
packet	[AF_PACKET]: Fix minor code duplication	2007-11-12 21:05:20 -08:00
rfkill	rfkill: Fix sparse warning	2007-11-10 22:00:28 -08:00
rose	[NET]: Forget the zero_it argument of sk_alloc()	2007-11-01 00:39:31 -07:00
rxrpc	[NET]: Add the helper kernel_sock_shutdown()	2007-11-12 18:10:39 -08:00
sched	[PKT_SCHED]: Check subqueue status before calling hard_start_xmit	2007-11-13 20:40:55 -08:00
sctp	[SCTP]: Add missing "space"	2007-11-19 23:47:47 -08:00
sunrpc	[SUNRPC]: Add missing "space"	2007-11-19 23:48:08 -08:00
tipc	[NET]: Forget the zero_it argument of sk_alloc()	2007-11-01 00:39:31 -07:00
unix	[UNIX]: The unix_nr_socks limit can be exceeded	2007-11-10 22:08:30 -08:00
wanrouter	[NET]: Make /proc/net per network namespace	2007-10-10 16:49:06 -07:00
wireless	[WIRELESS] WEXT: Fix userspace corruption on 64-bit.	2007-11-20 03:29:53 -08:00
x25	[NET]: Forget the zero_it argument of sk_alloc()	2007-11-01 00:39:31 -07:00
xfrm	cleanup asm/scatterlist.h includes	2007-11-02 08:47:06 +01:00
compat.c	O_CLOEXEC for SCM_RIGHTS	2007-07-16 09:05:45 -07:00
Kconfig	[NET]: Add network namespace clone & unshare support.	2007-10-10 16:52:46 -07:00
Makefile	9p: Reorganization of 9p file system code	2007-07-14 15:13:40 -05:00
nonet.c	[PATCH] Make most file operations structs in fs/ const	2006-03-28 09:16:06 -08:00
socket.c	[NET]: Add the helper kernel_sock_shutdown()	2007-11-12 18:10:39 -08:00
sysctl_net.c	Remove obsolete #include <linux/config.h>	2006-06-30 19:25:36 +02:00
TUNABLE