Mathias Krause c8c499175f Bluetooth: SCO - Fix missing msg_namelen update in sco_sock_recvmsg() ... If the socket is in state BT_CONNECT2 and BT_SK_DEFER_SETUP is set in the flags, sco_sock_recvmsg() returns early with 0 without updating the possibly set msg_namelen member. This, in turn, leads to a 128 byte kernel stack leak in net/socket.c. Fix this by updating msg_namelen in this case. For all other cases it will be handled in bt_sock_recvmsg(). Cc: Marcel Holtmann <marcel@holtmann.org> Cc: Gustavo Padovan <gustavo@padovan.org> Cc: Johan Hedberg <johan.hedberg@gmail.com> Signed-off-by: Mathias Krause <minipli@googlemail.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2013-04-07 16:28:01 -04:00
..
9p
802
8021q	8021q: fix a potential use-after-free	2013-03-24 17:27:28 -04:00
appletalk
atm	atm: update msg_namelen in vcc_recvmsg()	2013-04-07 16:28:00 -04:00
ax25	ax25: fix info leak via msg_name in ax25_recvmsg()	2013-04-07 16:28:00 -04:00
batman-adv	batman-adv: verify tt len does not exceed packet len	2013-03-11 22:59:47 +01:00
bluetooth	Bluetooth: SCO - Fix missing msg_namelen update in sco_sock_recvmsg()	2013-04-07 16:28:01 -04:00
bridge	bridge: fix crash when set mac address of br interface	2013-03-24 17:27:28 -04:00
caif
can
ceph	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client	2013-03-12 09:22:42 -07:00
core	netfilter: don't reset nf_trace in nf_reset()	2013-04-05 15:38:10 -04:00
dcb	dcbnl: fix various netlink info leaks	2013-03-10 05:19:26 -04:00
dccp
decnet
dns_resolver
dsa
ethernet
ieee802154	6lowpan: Fix endianness issue in is_addr_link_local().	2013-03-10 16:49:35 -04:00
ipv4	net: ipv4: notify when address lifetime changes	2013-04-05 00:51:12 -04:00
ipv6	ipv6/tcp: Stop processing ICMPv6 redirect messages	2013-04-07 12:36:08 -04:00
ipx
irda	net/irda: add missing error path release_sock call	2013-03-20 12:23:13 -04:00
iucv
key	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec	2013-03-27 14:07:04 -04:00
l2tp	l2tp: unhash l2tp sessions on delete, not on free	2013-03-20 12:10:39 -04:00
lapb
llc
mac80211	Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211	2013-04-01 15:09:28 -04:00
mac802154
netfilter	netfilter: nf_conntrack: fix error return code	2013-03-27 18:31:17 +01:00
netlabel
netlink	genetlink: trigger BUG_ON if a group name is too long	2013-03-20 12:05:51 -04:00
netrom
nfc	NFC: llcp: Keep the connected socket parent pointer alive	2013-03-26 14:35:57 +01:00
openvswitch	Merge branch 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jesse/openvswitch	2013-03-15 09:00:39 -04:00
packet
phonet
rds
rfkill
rose
rxrpc
sched	cbq: incorrect processing of high limits	2013-04-02 14:29:20 -04:00
sctp	sctp: don't break the loop while meeting the active_path so as to find the matched transport	2013-03-13 10:09:55 -04:00
sunrpc	NFS client bugfixes for Linux 3.9	2013-03-26 14:23:45 -07:00
tipc
unix	af_unix: If we don't care about credentials coallesce all messages	2013-04-05 00:49:13 -04:00
vmw_vsock	VSOCK: Handle changes to the VMCI context ID.	2013-04-02 14:39:17 -04:00
wimax
wireless	Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211	2013-03-25 14:50:17 -04:00
x25
xfrm	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec	2013-03-27 14:07:04 -04:00
compat.c
Kconfig
Makefile
nonet.c
socket.c
sysctl_net.c