linux-stable.git/net/ipv6/datagram.c, branch linux-3.4.y

ipv6: fix leaking uninitialized port number of offender sockaddr

2013-12-08T15:29:42+00:00

[ Upstream commit 1fa4c710b6fe7b0aac9907240291b6fe6aafc3b8 ]

Offenders don't have port numbers, so set it to 0.

Signed-off-by: Hannes Frederic Sowa 
Signed-off-by: David S. Miller 
Signed-off-by: Greg Kroah-Hartman

inet: fix addr_len/msg->msg_namelen assignment in recv_error and rxpmtu functions

2013-12-08T15:29:42+00:00

[ Upstream commit 85fbaa75037d0b6b786ff18658ddf0b4014ce2a4 ]

Commit bceaa90240b6019ed73b49965eac7d167610be69 ("inet: prevent leakage
of uninitialized memory to user in recv syscalls") conditionally updated
addr_len if the msg_name is written to. The recv_error and rxpmtu
functions relied on the recvmsg functions to set up addr_len before.

As this does not happen any more we have to pass addr_len to those
functions as well and set it to the size of the corresponding sockaddr
length.

This broke traceroute and such.

Fixes: bceaa90240b6 ("inet: prevent leakage of uninitialized memory to user in recv syscalls")
Reported-by: Brad Spengler 
Reported-by: Tom Labanowski
Cc: mpb 
Cc: David S. Miller 
Cc: Eric Dumazet 
Signed-off-by: Hannes Frederic Sowa 
Signed-off-by: David S. Miller 
Signed-off-by: Greg Kroah-Hartman

ipv6: helper function to get tclass

2012-02-13T05:45:38+00:00

Implement helper inline function to get traffic class from IPv6 header.

Signed-off-by: Jiri Benc 
Signed-off-by: David S. Miller

net: fix some sparse errors

2012-01-17T15:31:12+00:00

make C=2 CF="-D__CHECK_ENDIAN__" M=net

And fix flowi4_init_output() prototype for sport

Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller

net: remove ipv6_addr_copy()

2011-11-22T21:43:32+00:00

C assignment can handle struct in6_addr copying.

Signed-off-by: Alexey Dobriyan 
Signed-off-by: David S. Miller

net: make ipv6 PKTINFO honour freebind

2011-11-08T20:13:03+00:00

This just makes it possible to spoof source IPv6 address on a socket
without having to create and bind a new socket for every source IP
we wish to spoof.

Signed-off-by: Maciej Żenczykowski 
Signed-off-by: David S. Miller

ipv6: Remove superfluous NULL pointer check in ipv6_local_rxpmtu

2011-10-19T03:51:30+00:00

The pointer to mtu_info is taken from the common buffer
of the skb, thus it can't be a NULL pointer. This patch
removes this check on mtu_info.

Signed-off-by: Steffen Klassert 
Signed-off-by: David S. Miller

net: relax PKTINFO non local ipv6 udp xmit check

2011-08-30T21:39:01+00:00

Allow transparent sockets to be less restrictive about
the source ip of ipv6 udp packets being sent.

Google-Bug-Id: 5018138
Signed-off-by: Maciej Żenczykowski 
CC: "Erik Kline" 
CC: "Lorenzo Colitti" 
Signed-off-by: David S. Miller

ipv6: check for IPv4 mapped addresses when connecting IPv6 sockets

2011-08-05T10:56:30+00:00

When support for binding to 'mapped INADDR_ANY (::ffff.0.0.0.0)' was added
in 0f8d3c7ac3693d7b6c731bf2159273a59bf70e12 the rest of the code
wasn't told so now it's possible to bind IPv6 datagram socket to
::ffff.0.0.0.0, connect it to another IPv4 address and it will all
work except for getsockhame() which does not return the local address
as expected.

To give getsockname() something to work with check for 'mapped INADDR_ANY'
when connecting and update the in-core source addresses appropriately.

Signed-off-by: Max Matveev 
Signed-off-by: David S. Miller

net: Put fl6_* macros to struct flowi6 and use them again.

2011-03-12T23:08:55+00:00

Signed-off-by: David S. Miller