Mathias Krause 864745d291 xfrm_user: return error pointer instead of NULL ... When dump_one_state() returns an error, e.g. because of a too small buffer to dump the whole xfrm state, xfrm_state_netlink() returns NULL instead of an error pointer. But its callers expect an error pointer and therefore continue to operate on a NULL skbuff. This could lead to a privilege escalation (execution of user code in kernel context) if the attacker has CAP_NET_ADMIN and is able to map address 0. Signed-off-by: Mathias Krause <minipli@googlemail.com> Acked-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2012-09-18 16:13:45 -04:00
..
Kconfig	xfrm: make xfrm_algo.c a module	2012-05-15 13:13:34 -04:00
Makefile	xfrm: make xfrm_algo.c a module	2012-05-15 13:13:34 -04:00
xfrm_algo.c	xfrm_algo: drop an unnecessary inclusion	2012-05-15 13:13:34 -04:00
xfrm_hash.c
xfrm_hash.h	net: cleanup unsigned to unsigned int	2012-04-15 12:44:40 -04:00
xfrm_input.c	xfrm: Workaround incompatibility of ESN and async crypto	2012-09-04 14:09:45 -04:00
xfrm_ipcomp.c
xfrm_output.c	xfrm: Remove unused xfrm_state from xfrm_state_check_space	2012-03-22 19:29:58 -04:00
xfrm_policy.c	xfrm: invalidate dst on policy insertion/deletion	2012-09-18 15:57:03 -04:00
xfrm_proc.c
xfrm_replay.c	xfrm: Workaround incompatibility of ESN and async crypto	2012-09-04 14:09:45 -04:00
xfrm_state.c	net/xfrm/xfrm_state.c: fix error return code	2012-08-31 16:27:48 -04:00
xfrm_sysctl.c	net: Convert all sysctl registrations to register_net_sysctl	2012-04-20 21:22:30 -04:00
xfrm_user.c	xfrm_user: return error pointer instead of NULL	2012-09-18 16:13:45 -04:00