Willem de Bruijn cb9f1b7838 ip: validate header length on virtual device xmit ... KMSAN detected read beyond end of buffer in vti and sit devices when passing truncated packets with PF_PACKET. The issue affects additional ip tunnel devices. Extend commit 76c0ddd8c3 ("ip6_tunnel: be careful when accessing the inner header") and commit ccfec9e5cb ("ip_tunnel: be careful when accessing the inner header"). Move the check to a separate helper and call at the start of each ndo_start_xmit function in net/ipv4 and net/ipv6. Minor changes: - convert dev_kfree_skb to kfree_skb on error path, as dev_kfree_skb calls consume_skb which is not for error paths. - use pskb_network_may_pull even though that is pedantic here, as the same as pskb_may_pull for devices without llheaders. - do not cache ipv6 hdrs if used only once (unsafe across pskb_may_pull, was more relevant to earlier patch) Reported-by: syzbot <syzkaller@googlegroups.com> Signed-off-by: Willem de Bruijn <willemb@google.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2019-01-01 12:05:02 -08:00
..
acpi	Merge branch 'x86-cleanups-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-12-26 17:03:51 -08:00
asm-generic	Merge branch 'x86-mm-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-12-26 18:08:18 -08:00
clocksource
crypto	crypto: skcipher - remove remnants of internal IV generators	2018-12-23 11:52:45 +08:00
drm	Merge branch 'drm-next-4.21' of git://people.freedesktop.org/~agd5f/linux into drm-next	2018-12-13 10:06:34 +10:00
dt-bindings	This round is dominated by NXP's i.MX clk drivers. We gained support for two or	2018-12-25 14:57:37 -08:00
keys
kvm	KVM: arm/arm64: Remove arch timer workqueue	2018-12-19 17:47:07 +00:00
linux	ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()	2019-01-01 11:58:33 -08:00
math-emu
media	media fixes for v4.20-rc8	2018-12-25 13:11:30 -08:00
memory
misc
net	ip: validate header length on virtual device xmit	2019-01-01 12:05:02 -08:00
pcmcia
ras
rdma
scsi
soc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2018-12-27 13:04:52 -08:00
sound	ALSA: HD-Audio: SKL+: force HDaudio legacy or SKL+ driver selection	2018-12-19 18:07:23 +01:00
target
trace	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2018-12-09 21:43:31 -08:00
uapi	Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6	2018-12-27 13:53:32 -08:00
video
xen	xen: Introduce shared buffer helpers for page directory...	2018-12-18 12:15:55 -05:00