Dmitry Antipov f2aeb7306a ppp: reject claimed-as-LCP but actually malformed packets ...

Since 'ppp_async_encode()' assumes valid LCP packets (with code
from 1 to 7 inclusive), add 'ppp_check_packet()' to ensure that
LCP packet has an actual body beyond PPP_LCP header bytes, and
reject claimed-as-LCP but actually malformed data otherwise.

Reported-by: syzbot+ec0723ba9605678b14bf@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=ec0723ba9605678b14bf
Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Signed-off-by: Dmitry Antipov <dmantipov@yandex.ru>
Signed-off-by: Paolo Abeni <pabeni@redhat.com>

2024-07-11 11:00:08 +02:00

..

bsd_comp.c

net: fill in MODULE_DESCRIPTION()s for ppp

2024-02-15 08:03:46 -08:00

Kconfig

net/pppoe: fix a typo for the PPPOE_HASH_BITS_1 definition

2023-06-06 13:28:30 +02:00

Makefile

…

ppp_async.c

net: fill in MODULE_DESCRIPTION()s for ppp

2024-02-15 08:03:46 -08:00

ppp_deflate.c

net: fill in MODULE_DESCRIPTION()s for ppp

2024-02-15 08:03:46 -08:00

ppp_generic.c

ppp: reject claimed-as-LCP but actually malformed packets

2024-07-11 11:00:08 +02:00

ppp_mppe.c

mm, treewide: rename kzfree() to kfree_sensitive()

2020-08-07 11:33:22 -07:00

ppp_mppe.h

…

ppp_synctty.c

net: fill in MODULE_DESCRIPTION()s for ppp

2024-02-15 08:03:46 -08:00

pppoe.c

pppoe: Fix memory leak in pppoe_sendmsg()

2024-02-15 07:50:32 -08:00

pppox.c

…

pptp.c

Normalise "name (ad@dr)" MODULE_AUTHORs to "name <ad@dr>"

2024-03-06 13:07:39 -08:00