Skip to content

GitLab

Switch branch/tag
History Find file
Clone
ipv4: Missing sk_nulls_node_init() in ping_unhash().
David S. Miller authored 
[ Upstream commit a134f083

 ]

If we don't do that, then the poison value is left in the ->pprev
backlink.

This can cause crashes if we do a disconnect, followed by a connect().
Tested-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
Reported-by: default avatarWen Xu <hotdog3645@gmail.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
cf30cd6b
Name Last commit Last update
..
802 net/802/mrp: fix lockdep splat
8021q 8021q: fix a potential memory leak
9p 9p/trans_virtio.c: Fix broken zero-copy on vmalloc() buffers
appletalk appletalk: Fix socket referencing in skb
atm net: rework recvmsg handler msg_name and msg_namelen logic
ax25 net: rework recvmsg handler msg_name and msg_namelen logic
batman-adv batman-adv: set up network coding packet handlers during module init
bluetooth Bluetooth: Avoid use of session socket after the session gets freed
bridge br: fix use of ->rx_handler_data in code executed on non-rx_handler path
caif caif: fix MSG_OOB test in caif_seqpkt_recvmsg()
can can: add missing initialisations in CAN related skbuffs
ceph libceph: fix double __remove_osd() problem
core net: sysctl_net_core: check SNDBUF and RCVBUF for min length
dcb net: Use netlink_ns_capable to verify the permisions of netlink messages
dccp net:dccp: do not report ICMP redirects to user space
decnet net: Use netlink_ns_capable to verify the permisions of netlink messages
dns_resolver dns_resolver: Null-terminate the right string
dsa dsa: fix freeing of sparse port allocation
ethernet net: add ETH_P_802_3_MIN
ieee802154 6lowpan: fix lockdep splats
ipv4 ipv4: Missing sk_nulls_node_init() in ping_unhash().
ipv6 ipv6: Don't reduce hop limit for an interface
ipx ipx: fix locking regression in ipx_sendmsg and ipx_recvmsg
irda net: irda: fix wait_until_sent poll timeout
iucv af_iucv: wrong mapping of sent and confirmed skbs
key net: rework recvmsg handler msg_name and msg_namelen logic
l2tp l2tp: fix race while getting PMTU on PPP pseudo-wire
lapb net/lapb: remove depends on CONFIG_EXPERIMENTAL
llc net: llc: use correct size for sysctl timeout entries
mac80211 mac80211: drop unencrypted frames in mesh fwding
mac802154 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
netfilter netfilter: conntrack: disable generic tracking for known protocols
netlabel netlabel: improve domain mapping validation
netlink netlink: Don't reorder loads/stores before marking mmap netlink frame as available
netrom net: rework recvmsg handler msg_name and msg_namelen logic
nfc net: rework recvmsg handler msg_name and msg_namelen logic
openvswitch openvswitch: fix panic with multiple vlan headers
packet packet: handle too big packets for PACKET_V3
phonet net: Use netlink_ns_capable to verify the permisions of netlink messages
rds net: rds: use correct size for max unacked packets and bytes
rfkill Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next
rose net: rose: restore old recvmsg behavior
rxrpc rxrpc: bogus MSG_PEEK test in rxrpc_recvmsg()
sched ematch: Fix auto-loading of ematch modules.
sctp net: sctp: fix passing wrong parameter header to param_type2af in sctp_process_param
sunrpc sunrpc: fix braino in ->poll()
tipc tipc: clear 'next'-pointer of message fragments before reassembly
unix net: unix: non blocking recvmsg() should not return -EINTR
vmw_vsock net: rework recvmsg handler msg_name and msg_namelen logic
wimax net: cleanup unsigned to unsigned int
wireless
x25
xfrm
Kconfig
Makefile
compat.c
nonet.c
socket.c
sysctl_net.c