Pablo Neira Ayuso d701d81172 netfilter: nft_compat: do not dump private area ...

Zero pad private area, otherwise we expose private kernel pointer to
userspace. This patch also zeroes the tail area after the ->matchsize
and ->targetsize that results from XT_ALIGN().

Fixes: 0ca743a559 ("netfilter: nf_tables: add compatibility layer for x_tables")
Reported-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2018-10-11 11:29:53 +02:00

..

6lowpan

6lowpan: iphc: reset mac_header after decompress to fix panic

2018-07-06 12:32:12 +02:00

9p

Merge tag '9p-for-4.19-2' of git://github.com/martinetd/linux

2018-08-17 17:27:58 -07:00

802

treewide: setup_timer() -> timer_setup()

2017-11-21 15:57:07 -08:00

8021q

net: remove blank lines at end of file

2018-07-24 14:10:43 -07:00

appletalk

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

atm

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2018-08-15 15:04:25 -07:00

ax25

ax25: remove blank line at EOF

2018-07-24 14:10:42 -07:00

batman-adv

batman-adv: Increase version number to 2018.3

2018-09-14 17:59:20 +02:00

bluetooth

Bluetooth: SMP: fix crash in unpairing

2018-09-26 12:39:32 +03:00

bpf

bpf/test_run: support cgroup local storage

2018-08-03 00:47:32 +02:00

bpfilter

net: bpfilter: Fix type cast and pointer warnings

2018-10-05 11:51:06 -07:00

bridge

netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev

2018-09-20 18:24:14 +02:00

caif

net: simplify sock_poll_wait

2018-07-30 09:10:25 -07:00

can

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

ceph

crush: fix using plain integer as NULL warning

2018-08-13 17:55:44 +02:00

core

net: make skb_partial_csum_set() more robust against overflows

2018-10-10 10:21:31 -07:00

dcb

net: dcb: Add priority-to-DSCP map getters

2018-07-27 13:17:50 -07:00

dccp

inet: make sure to grab rcu_read_lock before using ireq->ireq_opt

2018-10-02 15:52:12 -07:00

decnet

decnet: fix using plain integer as NULL warning

2018-08-09 14:11:24 -07:00

dns_resolver

net: remove blank lines at end of file

2018-07-24 14:10:43 -07:00

dsa

net: dsa: Drop GPIO includes

2018-08-27 15:24:33 -07:00

ethernet

net: Convert GRO SKB handling to list_head.

2018-06-26 11:33:04 +09:00

hsr

net: hsr: Convert timers to use timer_setup()

2017-10-25 13:00:27 +09:00

ieee802154

net: ieee802154: 6lowpan: remove redundant pointers 'fq' and 'net'

2018-08-06 11:21:15 +02:00

ife

net: sched: ife: check on metadata length

2018-04-22 21:12:00 -04:00

ipv4

udp: Unbreak modules that rely on external __skb_recv_udp() availability

2018-10-07 20:33:10 -07:00

ipv6

ipv6: take rcu lock in rawv6_send_hdrinc()

2018-10-05 14:45:34 -07:00

iucv

net/iucv: declare iucv_path_table_empty() as static

2018-09-05 22:32:22 -07:00

kcm

Revert "kcm: remove any offset before parsing messages"

2018-09-17 18:43:42 -07:00

key

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next

2018-07-27 09:33:37 -07:00

l2tp

l2tp: fix unused function warning

2018-08-13 20:45:49 -07:00

l3mdev

…

lapb

treewide: Remove TIMER_FUNC_TYPE and TIMER_DATA_TYPE casts

2017-11-21 16:35:54 -08:00

llc

Merge ra.kernel.org:/pub/scm/linux/kernel/git/davem/net

2018-08-09 11:52:36 -07:00

mac80211

mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys

2018-10-01 09:13:48 +02:00

mac802154

net: mac802154: tx: expand tailroom if necessary

2018-08-06 11:21:37 +02:00

mpls

mpls: allow routes on ip6gre devices

2018-09-24 12:19:27 -07:00

ncsi

net/ncsi: Fixup .dumpit message flags and ID check in Netlink handler

2018-08-22 21:39:08 -07:00

netfilter

netfilter: nft_compat: do not dump private area

2018-10-11 11:29:53 +02:00

netlabel

netlabel: check for IPV4MASK in addrinfo_get

2018-09-21 18:58:34 -07:00

netlink

Merge ra.kernel.org:/pub/scm/linux/kernel/git/davem/net

2018-08-05 13:04:31 -07:00

netrom

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

nfc

NFC: Fix possible memory corruption when handling SHDLC I-Frame commands

2018-09-18 19:55:01 -07:00

nsh

nsh: set mac len based on inner packet

2018-07-12 16:55:29 -07:00

openvswitch

openvswitch: load NAT helper

2018-10-04 21:45:16 -07:00

packet

net/packet: fix packet drop as of virtio gso

2018-10-04 22:23:15 -07:00

phonet

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

psample

MAINTAINERS: Update Yotam's E-mail

2017-11-01 12:19:03 +09:00

qrtr

net: qrtr: Reset the node and port ID of broadcast messages

2018-07-05 20:20:03 +09:00

rds

rds: RDS (tcp) hangs on sendto() to unresponding address

2018-10-10 22:19:52 -07:00

rfkill

Merge tag 'mac80211-for-davem-2018-09-03' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211

2018-09-03 22:12:02 -07:00

rose

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

rxrpc

rxrpc: Fix error distribution

2018-09-28 10:33:17 +01:00

sched

net: sched: cls_u32: fix hnode refcounting

2018-10-07 21:02:37 -07:00

sctp

sctp: fix fall-through annotation

2018-10-03 09:33:13 -07:00

smc

smc: generic netlink family should be __ro_after_init

2018-09-20 07:49:55 -07:00

strparser

strparser: remove redundant variable 'rd_desc'

2018-08-01 10:00:06 -07:00

sunrpc

Merge tag 'nfs-for-4.19-1' of git://git.linux-nfs.org/projects/anna/linux-nfs

2018-08-23 16:03:58 -07:00

switchdev

net: bridge: Add/del switchdev object on host join/leave

2017-11-10 13:41:40 +09:00

tipc

tipc: ignore STATE_MSG on wrong link session

2018-10-01 22:35:30 -07:00

tls

tls: fix currently broken MSG_PEEK behavior

2018-09-17 08:03:09 -07:00

unix

af_unix: ensure POLLOUT on remote close() for connected dgram socket

2018-08-03 16:44:19 -07:00

vmw_vsock

vsock: split dwork to avoid reinitializations

2018-08-07 12:39:13 -07:00

wimax

wimax: remove blank lines at EOF

2018-07-24 14:10:42 -07:00

wireless

cfg80211: fix use-after-free in reg_process_hint()

2018-10-01 09:14:03 +02:00

x25

x25: remove blank lines at EOF

2018-07-24 14:10:42 -07:00

xdp

xsk: fix return value of xdp_umem_assign_dev()

2018-08-21 22:06:53 +02:00

xfrm

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec

2018-10-01 22:29:25 -07:00

compat.c

net: avoid unnecessary sock_flag() check when enable timestamp

2018-08-06 10:42:48 -07:00

Kconfig

net: remove blank lines at end of file

2018-07-24 14:10:43 -07:00

Makefile

bpfilter: check compiler capability in Kconfig

2018-06-28 13:36:39 +09:00

socket.c

socket: fix struct ifreq size in compat ioctl

2018-09-13 16:01:06 -07:00

sysctl_net.c

net: Drop pernet_operations::async

2018-03-27 13:18:09 -04:00