Dan Carpenter 80aa4e1096 x25: add a sanity check parsing X.25 facilities ... This was found with a manual audit and I don't have a reproducer. We limit ->calling_len and ->called_len when we get them from copy_from_user() in x25_ioctl() so when they come from skb->data then we should cap them there as well. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2013-09-04 00:27:27 -04:00
..
af_x25.c	x25: Fix broken locking in ioctl error paths.	2013-07-01 18:15:25 -07:00
Kconfig	net/x25: remove depends on CONFIG_EXPERIMENTAL	2013-01-11 11:40:03 -08:00
Makefile
sysctl_net_x25.c	net: Convert all sysctl registrations to register_net_sysctl	2012-04-20 21:22:30 -04:00
x25_dev.c	net: add a limit parameter to sk_add_backlog()	2012-04-23 22:28:28 -04:00
x25_facilities.c	x25: add a sanity check parsing X.25 facilities	2013-09-04 00:27:27 -04:00
x25_forward.c
x25_in.c	x25: Handle undersized/fragmented skbs	2011-10-17 19:31:39 -04:00
x25_link.c	x25: Handle undersized/fragmented skbs	2011-10-17 19:31:39 -04:00
x25_out.c
x25_proc.c	x25: use proc_remove_subtree()	2013-04-09 14:13:35 -04:00
x25_route.c	net: Fix (nearly-)kernel-doc comments for various functions	2012-07-10 23:13:45 -07:00
x25_subr.c	x25: Handle undersized/fragmented skbs	2011-10-17 19:31:39 -04:00
x25_timer.c