Florian Westphal b4977709b7 netfilter: x_tables: fix compat match/target pad out-of-bound write ... upsteam: b29c457a6511435960115c0f548c4360d5f4801d xt_compat_match/target_from_user doesn't check that zeroing the area to start of next rule won't write past end of allocated ruleset blob. Remove this code and zero the entire blob beforehand. Fixes CVE: CVE-2021-22555 Reported-by: syzbot+cfc0247ac173f597aaaa@syzkaller.appspotmail.com Reported-by: Andy Nguyen <theflow@google.com> Fixes: 9fa492cdc160c ("[NETFILTER]: x_tables: simplify compat API") Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2021-07-20 10:33:55 +00:00
..
netfilter	netfilter: x_tables: fix compat match/target pad out-of-bound write	2021-07-20 10:33:55 +00:00
Kconfig	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
Makefile	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
af_inet.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ah4.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
arp.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
cipso_ipv4.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
datagram.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
devinet.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
esp4.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
esp4_offload.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
fib_frontend.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
fib_lookup.h	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
fib_notifier.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
fib_rules.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
fib_semantics.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
fib_trie.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
fou.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
gre_demux.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
gre_offload.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
icmp.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
igmp.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
inet_connection_sock.c	getsockopt: add SO_MARK2 to get the MARK of flow	2020-07-08 16:04:22 +08:00
inet_diag.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
inet_fragment.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
inet_hashtables.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
inet_timewait_sock.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
inetpeer.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ip_forward.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ip_fragment.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ip_gre.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ip_input.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ip_options.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ip_output.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ip_sockglue.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ip_tunnel.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ip_tunnel_core.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ip_vti.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ipcomp.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ipconfig.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ipip.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ipmr.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
netfilter.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ping.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
proc.c	tcp: tcp_fragment() should apply sane memory limits	2020-01-02 12:16:41 +08:00
protocol.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
raw.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
raw_diag.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
route.c	net: fix compile error in 9db1459215	2021-04-22 09:05:23 +00:00
syncookies.c	net: namespaceify sysctl_tcp_workaround_signed_windows	2020-01-02 11:31:18 +08:00
sysctl_net_ipv4.c	net: sched when reading udp proc	2020-07-08 16:07:57 +08:00
tcp.c	net: increase tcp rmem default	2020-05-29 10:40:04 +08:00
tcp_bbr.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_bic.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_cdg.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_cong.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_cubic.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_dctcp.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_diag.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_fastopen.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_highspeed.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_htcp.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_hybla.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_illinois.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_input.c	getsockopt: add SO_MARK2 to get the MARK of flow	2020-07-08 16:04:22 +08:00
tcp_ipv4.c	inet: unconstify ipv6_mapped and tcp_request_sock_ipv4/6_ops	2020-09-23 19:07:10 +08:00
tcp_lp.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_metrics.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_minisocks.c	net: namespaceify sysctl_tcp_workaround_signed_windows	2020-01-02 11:31:18 +08:00
tcp_nv.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_offload.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_output.c	net: fix memory limit bug in tcp_fragment	2020-05-29 10:39:02 +08:00
tcp_probe.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_rate.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_recovery.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_scalable.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_timer.c	tcp: make TCP_RTO_MIN/MAX be tunable	2020-01-02 12:20:29 +08:00
tcp_ulp.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_vegas.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_vegas.h	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_veno.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_westwood.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tcp_yeah.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tunnel4.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
udp.c	net: sched when reading udp proc	2020-07-08 16:07:57 +08:00
udp_diag.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
udp_impl.h	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
udp_offload.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
udp_tunnel.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
udplite.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
xfrm4_input.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
xfrm4_mode_beet.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
xfrm4_mode_transport.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
xfrm4_mode_tunnel.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
xfrm4_output.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
xfrm4_policy.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
xfrm4_protocol.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
xfrm4_state.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
xfrm4_tunnel.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00