https://github.com/torvalds/linux
Revision 43c13605bad44b8abbc9776d6e63f62ccb7a47d6 authored by Davide Caratti on 03 December 2020, 09:46:06 UTC, committed by Jakub Kicinski on 03 December 2020, 19:13:29 UTC
when openvswitch is configured to mangle the LSE, the current value is
read from the packet dereferencing 4 bytes at mpls_hdr(): ensure that
the label is contained in the skb "linear" area.
Found by code inspection.
Fixes: d27cf5c59a12 ("net: core: add MPLS update core helper and use in OvS")
Signed-off-by: Davide Caratti <dcaratti@redhat.com>
Link: https://lore.kernel.org/r/aa099f245d93218b84b5c056b67b6058ccf81a66.1606987185.git.dcaratti@redhat.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
1 parent 13de4ed
Tip revision: 43c13605bad44b8abbc9776d6e63f62ccb7a47d6 authored by Davide Caratti on 03 December 2020, 09:46:06 UTC
net: openvswitch: ensure LSE is pullable before reading it
net: openvswitch: ensure LSE is pullable before reading it
Tip revision: 43c1360
| File | Mode | Size |
|---|---|---|
| Kconfig | -rw-r--r-- | 4.0 KB |
| Makefile | -rw-r--r-- | 703 bytes |
| acl.c | -rw-r--r-- | 6.6 KB |
| acl.h | -rw-r--r-- | 1.5 KB |
| balloc.c | -rw-r--r-- | 26.5 KB |
| bitmap.c | -rw-r--r-- | 2.7 KB |
| block_validity.c | -rw-r--r-- | 9.4 KB |
| dir.c | -rw-r--r-- | 17.4 KB |
| ext4.h | -rw-r--r-- | 128.0 KB |
| ext4_extents.h | -rw-r--r-- | 8.4 KB |
| ext4_jbd2.c | -rw-r--r-- | 10.3 KB |
| ext4_jbd2.h | -rw-r--r-- | 17.2 KB |
| extents.c | -rw-r--r-- | 164.0 KB |
| extents_status.c | -rw-r--r-- | 60.3 KB |
| extents_status.h | -rw-r--r-- | 8.0 KB |
| fast_commit.c | -rw-r--r-- | 59.0 KB |
| fast_commit.h | -rw-r--r-- | 3.7 KB |
| file.c | -rw-r--r-- | 22.9 KB |
| fsmap.c | -rw-r--r-- | 19.8 KB |
| fsmap.h | -rw-r--r-- | 2.0 KB |
| fsync.c | -rw-r--r-- | 5.2 KB |
| hash.c | -rw-r--r-- | 6.8 KB |
| ialloc.c | -rw-r--r-- | 43.9 KB |
| indirect.c | -rw-r--r-- | 42.6 KB |
| inline.c | -rw-r--r-- | 48.2 KB |
| inode-test.c | -rw-r--r-- | 7.3 KB |
| inode.c | -rw-r--r-- | 178.0 KB |
| ioctl.c | -rw-r--r-- | 34.5 KB |
| mballoc.c | -rw-r--r-- | 162.8 KB |
| mballoc.h | -rw-r--r-- | 5.4 KB |
| migrate.c | -rw-r--r-- | 16.8 KB |
| mmp.c | -rw-r--r-- | 10.0 KB |
| move_extent.c | -rw-r--r-- | 20.8 KB |
| namei.c | -rw-r--r-- | 109.1 KB |
| page-io.c | -rw-r--r-- | 15.2 KB |
| readpage.c | -rw-r--r-- | 11.3 KB |
| resize.c | -rw-r--r-- | 60.2 KB |
| super.c | -rw-r--r-- | 189.2 KB |
| symlink.c | -rw-r--r-- | 1.7 KB |
| sysfs.c | -rw-r--r-- | 15.8 KB |
| truncate.h | -rw-r--r-- | 1.5 KB |
| verity.c | -rw-r--r-- | 10.2 KB |
| xattr.c | -rw-r--r-- | 81.8 KB |
| xattr.h | -rw-r--r-- | 7.2 KB |
| xattr_hurd.c | -rw-r--r-- | 1.3 KB |
| xattr_security.c | -rw-r--r-- | 1.6 KB |
| xattr_trusted.c | -rw-r--r-- | 1.2 KB |
| xattr_user.c | -rw-r--r-- | 1.2 KB |
Computing file changes ...
