renegade-project/linux-next
2
0
Fork 0
mirror of https://github.com/edk2-porting/linux-next.git synced 2024-12-26 22:24:09 +08:00
Code
b0ff7c2005
linux-next/net/ipv4/netfilter
History
Patrick McHardy f41d5bb1d9 [NETFILTER]: SNMP NAT: fix memory corruption 
Fix memory corruption caused by snmp_trap_decode:

- When snmp_trap_decode fails before the id and address are allocated,
  the pointers contain random memory, but are freed by the caller
  (snmp_parse_mangle).

- When snmp_trap_decode fails after allocating just the ID, it tries
  to free both address and ID, but the address pointer still contains
  random memory. The caller frees both ID and random memory again.

- When snmp_trap_decode fails after allocating both, it frees both,
  and the callers frees both again.

The corruption can be triggered remotely when the ip_nat_snmp_basic
module is loaded and traffic on port 161 or 162 is NATed.

Found by multiple testcases of the trap-app and trap-enc groups of the
PROTOS c06-snmpv1 testsuite.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-05-22 16:55:14 -07:00
..
arp_tables.c [NETFILTER]: Fix do_add_counters race, possible oops or info leak (CVE-2006-0039) 2006-05-19 02:16:52 -07:00
arpt_mangle.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
arptable_filter.c [NETFILTER]: Clean up hook registration 2006-04-09 22:25:33 -07:00
ip_conntrack_amanda.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_conntrack_core.c [PATCH] for_each_possible_cpu: network codes 2006-04-11 06:18:31 -07:00
ip_conntrack_ftp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_conntrack_helper_h323_asn1.c [NETFILTER]: H.323 helper: Change author's email address 2006-05-03 23:19:59 -07:00
ip_conntrack_helper_h323_types.c [NETFILTER]: Add H.323 conntrack/NAT helper 2006-03-20 23:41:17 -08:00
ip_conntrack_helper_h323.c [NETFILTER]: H.323 helper: fix endless loop caused by invalid TPKT len 2006-05-03 23:16:29 -07:00
ip_conntrack_helper_pptp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_conntrack_irc.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_conntrack_netbios_ns.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_conntrack_netlink.c [NETFILTER]: {ip,nf}_conntrack_netlink: fix expectation notifier unregistration 2006-04-01 02:24:48 -08:00
ip_conntrack_proto_generic.c [NETFILTER]: Fix timeout sysctls on big-endian 64bit architectures 2006-01-10 12:54:35 -08:00
ip_conntrack_proto_gre.c [NETFILTER]: ip_conntrack_proto_gre.c needs linux/interrupt.h 2006-01-17 02:42:02 -08:00
ip_conntrack_proto_icmp.c [NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functions 2006-04-09 22:25:42 -07:00
ip_conntrack_proto_sctp.c [NETFILTER] SCTP conntrack: fix infinite loop 2006-05-02 17:26:39 -07:00
ip_conntrack_proto_tcp.c [NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functions 2006-04-09 22:25:42 -07:00
ip_conntrack_proto_udp.c [NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functions 2006-04-09 22:25:42 -07:00
ip_conntrack_standalone.c [NETFILTER]: Fix section mismatch warnings 2006-04-09 22:25:34 -07:00
ip_conntrack_tftp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_nat_amanda.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_nat_core.c [NETFILTER]: Fix NAT PMTUD problems 2006-02-19 22:26:40 -08:00
ip_nat_ftp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_nat_helper_h323.c [NETFILTER]: H.323 helper: remove changelog 2006-04-09 22:25:43 -07:00
ip_nat_helper_pptp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_nat_helper.c [NETFILTER]: Fix invalid module autoloading by splitting iptable_nat 2005-09-26 15:25:11 -07:00
ip_nat_irc.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_nat_proto_gre.c [NETFILTER]: GRE conntrack: fix htons/htonl confusion 2006-05-19 02:16:29 -07:00
ip_nat_proto_icmp.c [NETFILTER]: Remove unused function from NAT protocol helpers 2006-01-10 12:54:34 -08:00
ip_nat_proto_tcp.c [NETFILTER]: Remove unused function from NAT protocol helpers 2006-01-10 12:54:34 -08:00
ip_nat_proto_udp.c [NETFILTER]: Remove unused function from NAT protocol helpers 2006-01-10 12:54:34 -08:00
ip_nat_proto_unknown.c [NETFILTER]: Remove unused function from NAT protocol helpers 2006-01-10 12:54:34 -08:00
ip_nat_rule.c [NETFILTER]: Fix DNAT in LOCAL_OUT 2006-04-09 22:38:29 -07:00
ip_nat_snmp_basic.c [NETFILTER]: SNMP NAT: fix memory corruption 2006-05-22 16:55:14 -07:00
ip_nat_standalone.c [NETFILTER]: NAT: silence unused variable warnings with CONFIG_XFRM=n 2006-05-03 23:19:26 -07:00
ip_nat_tftp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ip_queue.c [NETFILTER]: Fix section mismatch warnings 2006-04-09 22:25:34 -07:00
ip_tables.c [NETFILTER]: x_tables: don't use __copy_{from,to}_user on unchecked memory in compat layer 2006-05-03 23:20:27 -07:00
ipt_addrtype.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_ah.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_CLUSTERIP.c [NETFILTER]: Fix section mismatch warnings 2006-04-09 22:25:34 -07:00
ipt_dscp.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_DSCP.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_ecn.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_ECN.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_hashlimit.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_iprange.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_LOG.c [NETFILTER]: fix format specifier for netfilter log targets 2006-05-19 02:15:47 -07:00
ipt_MASQUERADE.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_NETMAP.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_owner.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_recent.c [NETFILTER]: Fix memory leak in ipt_recent 2006-05-19 02:15:13 -07:00
ipt_REDIRECT.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_REJECT.c [NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functions 2006-04-09 22:25:42 -07:00
ipt_SAME.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_TCPMSS.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_tos.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_TOS.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_ttl.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_TTL.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_ULOG.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
iptable_filter.c [NETFILTER]: Clean up hook registration 2006-04-09 22:25:33 -07:00
iptable_mangle.c [NETFILTER]: Clean up hook registration 2006-04-09 22:25:33 -07:00
iptable_raw.c [NETFILTER]: Clean up hook registration 2006-04-09 22:25:33 -07:00
Kconfig [NETFILTER]: ULOG target is not obsolete 2006-04-24 17:27:29 -07:00
Makefile [NETFILTER]: x_tables: unify IPv4/IPv6 multiport match 2006-04-01 02:22:54 -08:00
nf_conntrack_l3proto_ipv4.c [NETFILTER]: Fix section mismatch warnings 2006-04-09 22:25:34 -07:00
nf_conntrack_proto_icmp.c [NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functions 2006-04-09 22:25:42 -07:00