Florian Westphal 8f10d6cc7a ppp: deflate: never return len larger than output buffer ... [ Upstream commit e2a4800e75 ] When we've run out of space in the output buffer to store more data, we will call zlib_deflate with a NULL output buffer until we've consumed remaining input. When this happens, olen contains the size the output buffer would have consumed iff we'd have had enough room. This can later cause skb_over_panic when ppp_generic skb_put()s the returned length. Reported-by: Iain Douglas <centos@1n6.org.uk> Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2015-02-26 17:50:12 -08:00
..
Kconfig	tty/serial patches for 3.9-rc1	2013-02-21 13:41:04 -08:00
Makefile	ppp: Move the PPP drivers	2011-08-27 00:58:26 -07:00
bsd_comp.c	ppp: Move the PPP drivers	2011-08-27 00:58:26 -07:00
ppp_async.c	tty: Fix recursive deadlock in tty_perform_flush()	2013-03-18 16:52:24 -07:00
ppp_deflate.c	ppp: deflate: never return len larger than output buffer	2015-02-26 17:50:12 -08:00
ppp_generic.c	fix misuses of f_count() in ppp and netlink	2014-11-14 08:59:48 -08:00
ppp_mppe.c	drivers/net/*: Fix FSF address in file headers	2013-12-06 12:37:55 -05:00
ppp_mppe.h	ppp: Move the PPP drivers	2011-08-27 00:58:26 -07:00
ppp_synctty.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-05-01 14:08:52 -07:00
pppoe.c	net: pppoe: use correct channel MTU when using Multilink PPP	2014-07-28 08:06:01 -07:00
pppox.c	ppp: Replace uses of <linux/if_ppp.h> with <linux/ppp-ioctl.h>	2012-03-04 20:41:38 -05:00
pptp.c	pptp: fix stack info leak in pptp_getname()	2014-12-06 15:55:34 -08:00