kernel-ark/net/sched
Thomas Graf 26dab8930b [PKT_SCHED]: Fix illegal memory dereferences when dumping actions
The TCA_ACT_KIND attribute is used without checking its
availability when dumping actions therefore leading to a
value of 0x4 being dereferenced.

The use of strcmp() in tc_lookup_action_n() isn't safe
when fed with string from an attribute without enforcing
proper NUL termination.

Both bugs can be triggered with malformed netlink message
and don't require any privileges.

Signed-off-by: Thomas Graf <tgraf@suug.ch>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-07-05 20:45:06 -07:00
..
act_api.c [PKT_SCHED]: Fix illegal memory dereferences when dumping actions 2006-07-05 20:45:06 -07:00
act_gact.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
act_ipt.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
act_mirred.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
act_pedit.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
act_police.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
act_simple.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
cls_api.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
cls_basic.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
cls_fw.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
cls_route.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
cls_rsvp6.c
cls_rsvp.c
cls_rsvp.h Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
cls_tcindex.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
cls_u32.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
em_cmp.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
em_meta.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
em_nbyte.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
em_text.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
em_u32.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
ematch.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
estimator.c
Kconfig
Makefile
sch_api.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_atm.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_blackhole.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_cbq.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_dsmark.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_fifo.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_generic.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_gred.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_hfsc.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_htb.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_ingress.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_netem.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_prio.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_red.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_sfq.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_tbf.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
sch_teql.c