Revision 05fb3dbda187bbd9cc1cd0e97e5d6595af570ac6 authored by Robin Murphy on 30 July 2020, 09:56:49 UTC, committed by Will Deacon on 30 July 2020, 16:01:38 UTC
Although iph is expected to point to at least 20 bytes of valid memory, ihl may be bogus, for example on reception of a corrupt packet. If it happens to be less than 5, we really don't want to run away and dereference 16GB worth of memory until it wraps back to exactly zero... Fixes: 0e455d8e80aa ("arm64: Implement optimised IP checksum helpers") Reported-by: guodeqing <geffrey.guo@huawei.com> Signed-off-by: Robin Murphy <robin.murphy@arm.com> Signed-off-by: Will Deacon <will@kernel.org>
1 parent 835d1c3
File | Mode | Size |
---|---|---|
partitions | ||
Kconfig | -rw-r--r-- | 6.8 KB |
Kconfig.iosched | -rw-r--r-- | 1.3 KB |
Makefile | -rw-r--r-- | 1.7 KB |
badblocks.c | -rw-r--r-- | 14.1 KB |
bfq-cgroup.c | -rw-r--r-- | 38.5 KB |
bfq-iosched.c | -rw-r--r-- | 236.9 KB |
bfq-iosched.h | -rw-r--r-- | 36.7 KB |
bfq-wf2q.c | -rw-r--r-- | 52.6 KB |
bio-integrity.c | -rw-r--r-- | 12.4 KB |
bio.c | -rw-r--r-- | 47.2 KB |
blk-cgroup-rwstat.c | -rw-r--r-- | 3.4 KB |
blk-cgroup-rwstat.h | -rw-r--r-- | 3.9 KB |
blk-cgroup.c | -rw-r--r-- | 44.9 KB |
blk-core.c | -rw-r--r-- | 50.5 KB |
blk-crypto-fallback.c | -rw-r--r-- | 18.2 KB |
blk-crypto-internal.h | -rw-r--r-- | 5.0 KB |
blk-crypto.c | -rw-r--r-- | 11.8 KB |
blk-exec.c | -rw-r--r-- | 2.6 KB |
blk-flush.c | -rw-r--r-- | 14.1 KB |
blk-integrity.c | -rw-r--r-- | 11.9 KB |
blk-ioc.c | -rw-r--r-- | 10.4 KB |
blk-iocost.c | -rw-r--r-- | 68.9 KB |
blk-iolatency.c | -rw-r--r-- | 28.0 KB |
blk-lib.c | -rw-r--r-- | 10.2 KB |
blk-map.c | -rw-r--r-- | 16.7 KB |
blk-merge.c | -rw-r--r-- | 23.9 KB |
blk-mq-cpumap.c | -rw-r--r-- | 2.2 KB |
blk-mq-debugfs-zoned.c | -rw-r--r-- | 435 bytes |
blk-mq-debugfs.c | -rw-r--r-- | 24.5 KB |
blk-mq-debugfs.h | -rw-r--r-- | 2.7 KB |
blk-mq-pci.c | -rw-r--r-- | 1.3 KB |
blk-mq-rdma.c | -rw-r--r-- | 1.3 KB |
blk-mq-sched.c | -rw-r--r-- | 17.3 KB |
blk-mq-sched.h | -rw-r--r-- | 2.5 KB |
blk-mq-sysfs.c | -rw-r--r-- | 8.4 KB |
blk-mq-tag.c | -rw-r--r-- | 16.4 KB |
blk-mq-tag.h | -rw-r--r-- | 2.5 KB |
blk-mq-virtio.c | -rw-r--r-- | 1.3 KB |
blk-mq.c | -rw-r--r-- | 93.5 KB |
blk-mq.h | -rw-r--r-- | 7.6 KB |
blk-pm.c | -rw-r--r-- | 6.6 KB |
blk-pm.h | -rw-r--r-- | 1.4 KB |
blk-rq-qos.c | -rw-r--r-- | 7.1 KB |
blk-rq-qos.h | -rw-r--r-- | 5.0 KB |
blk-settings.c | -rw-r--r-- | 26.3 KB |
blk-softirq.c | -rw-r--r-- | 3.7 KB |
blk-stat.c | -rw-r--r-- | 4.6 KB |
blk-stat.h | -rw-r--r-- | 4.6 KB |
blk-sysfs.c | -rw-r--r-- | 26.7 KB |
blk-throttle.c | -rw-r--r-- | 67.4 KB |
blk-timeout.c | -rw-r--r-- | 3.8 KB |
blk-wbt.c | -rw-r--r-- | 19.8 KB |
blk-wbt.h | -rw-r--r-- | 2.8 KB |
blk-zoned.c | -rw-r--r-- | 13.9 KB |
blk.h | -rw-r--r-- | 13.1 KB |
bounce.c | -rw-r--r-- | 9.4 KB |
bsg-lib.c | -rw-r--r-- | 9.8 KB |
bsg.c | -rw-r--r-- | 11.1 KB |
cmdline-parser.c | -rw-r--r-- | 4.9 KB |
elevator.c | -rw-r--r-- | 18.9 KB |
genhd.c | -rw-r--r-- | 55.3 KB |
ioctl.c | -rw-r--r-- | 16.9 KB |
ioprio.c | -rw-r--r-- | 5.1 KB |
keyslot-manager.c | -rw-r--r-- | 10.7 KB |
kyber-iosched.c | -rw-r--r-- | 27.8 KB |
mq-deadline.c | -rw-r--r-- | 20.6 KB |
opal_proto.h | -rw-r--r-- | 9.4 KB |
scsi_ioctl.c | -rw-r--r-- | 22.8 KB |
sed-opal.c | -rw-r--r-- | 62.5 KB |
t10-pi.c | -rw-r--r-- | 7.8 KB |
Computing file changes ...