android_kernel_xiaomi_sm8350/net/dccp
Arnaldo Carvalho de Melo 39ebc0276b [DCCP] getsockopt: Fix DCCP_SOCKOPT_[SEND,RECV]_CSCOV
We were only checking if there was enough space to put the int, but
left len as specified by the (malicious) user, sigh, fix it by setting
len to sizeof(val) and transfering just one int worth of data, the one
asked for.

Also check for negative len values.

Signed-off-by: Arnaldo Carvalho de Melo <acme@ghostprotocols.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-03-28 11:54:32 -07:00
..
ccids [DCCP]: Revert patch which disables bidirectional mode 2007-03-07 16:08:07 -08:00
ackvec.c [DCCP]: Whitespace cleanups 2006-12-11 14:35:00 -08:00
ackvec.h
ccid.c [PATCH] slab: remove kmem_cache_t 2006-12-07 08:39:25 -08:00
ccid.h [DCCP] ccid: Deprecate ccid_hc_tx_insert_options 2006-12-11 14:34:49 -08:00
dccp.h [DCCP]: make dccp_write_xmit_timer() static again 2007-03-25 18:48:10 -07:00
diag.c
feat.c [NET] DCCP: Fix whitespace errors. 2007-02-10 23:19:27 -08:00
feat.h [NET] DCCP: Fix whitespace errors. 2007-02-10 23:19:27 -08:00
input.c [DCCP]: Revert patch which disables bidirectional mode 2007-03-07 16:08:07 -08:00
ipv4.c [NET] DCCP: Fix whitespace errors. 2007-02-10 23:19:27 -08:00
ipv6.c [NET] DCCP: Fix whitespace errors. 2007-02-10 23:19:27 -08:00
ipv6.h
Kconfig
Makefile
minisocks.c [DCCP]: Set RTO for newly created child socket 2007-03-06 14:24:44 -08:00
options.c [NET] DCCP: Fix whitespace errors. 2007-02-10 23:19:27 -08:00
output.c [DCCP]: Initialise write_xmit_timer also on passive sockets 2007-03-09 13:47:58 -08:00
probe.c [PATCH] mark struct file_operations const 7 2007-02-12 09:48:46 -08:00
proto.c [DCCP] getsockopt: Fix DCCP_SOCKOPT_[SEND,RECV]_CSCOV 2007-03-28 11:54:32 -07:00
sysctl.c [PATCH] sysctl: remove insert_at_head from register_sysctl 2007-02-14 08:09:59 -08:00
timer.c [DCCP]: make dccp_write_xmit_timer() static again 2007-03-25 18:48:10 -07:00