Tuong Lien 31e4ccc99e tipc: fix use-after-free in tipc_disc_rcv() ... In the function 'tipc_disc_rcv()', the 'msg_peer_net_hash()' is called to read the header data field but after the message skb has been freed, that might result in a garbage value... This commit fixes it by defining a new local variable to store the data first, just like the other header fields' handling. Fixes: f73b12812a ("tipc: improve throughput between nodes in netns") Acked-by: Jon Maloy <jon.maloy@ericsson.com> Signed-off-by: Tuong Lien <tuong.t.lien@dektech.com.au> Signed-off-by: David S. Miller <davem@davemloft.net>		2019-12-10 17:45:04 -08:00
..
addr.c
addr.h
bcast.c	tipc: fix potential hanging after b/rcast changing	2019-12-10 17:45:04 -08:00
bcast.h
bearer.c
bearer.h
core.c	tipc: fix ordering of tipc module init and exit routine	2019-12-06 12:01:09 -08:00
core.h
crypto.c
crypto.h
diag.c
discover.c	tipc: fix use-after-free in tipc_disc_rcv()	2019-12-10 17:45:04 -08:00
discover.h
eth_media.c
group.c
group.h
ib_media.c
Kconfig
link.c
link.h
Makefile
monitor.c
monitor.h
msg.c
msg.h
name_distr.c
name_distr.h
name_table.c	tipc: fix name table rbtree issues	2019-12-10 17:45:04 -08:00
name_table.h	tipc: support in-order name publication events	2019-11-22 09:29:50 -08:00
net.c
net.h
netlink.c
netlink.h
netlink_compat.c	tipc: fix link name length check	2019-11-26 10:03:12 -08:00
node.c
node.h
socket.c	tipc: fix retrans failure due to wrong destination	2019-12-10 17:45:04 -08:00
socket.h
subscr.c
subscr.h
sysctl.c
topsrv.c
topsrv.h
trace.c
trace.h
udp_media.c	net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup	2019-12-04 12:27:13 -08:00
udp_media.h