Mathias Krause b860d3cc62 l2tp: fix info leak in l2tp_ip6_recvmsg() ...

The L2TP code for IPv6 fails to initialize the l2tp_conn_id member of
struct sockaddr_l2tpip6 and therefore leaks four bytes kernel stack
in l2tp_ip6_recvmsg() in case msg_name is set.

Initialize l2tp_conn_id with 0 to avoid the info leak.

Signed-off-by: Mathias Krause <[email protected]>
Signed-off-by: David S. Miller <[email protected]>

2013-04-07 16:28:01 -04:00

..

Kconfig

net/l2tp: remove depends on CONFIG_EXPERIMENTAL

2013-01-11 11:40:01 -08:00

l2tp_core.c

l2tp: unhash l2tp sessions on delete, not on free

2013-03-20 12:10:39 -04:00

l2tp_core.h

l2tp: unhash l2tp sessions on delete, not on free

2013-03-20 12:10:39 -04:00

l2tp_debugfs.c

l2tp: avoid deadlock in l2tp stats update

2013-03-20 12:10:39 -04:00

l2tp_eth.c

l2tp: fix oops in l2tp_eth_create() error path

2012-11-02 21:56:35 -04:00

l2tp_ip6.c

l2tp: fix info leak in l2tp_ip6_recvmsg()

2013-04-07 16:28:01 -04:00

l2tp_ip.c

l2tp: close sessions in ip socket destroy callback

2013-03-20 12:10:38 -04:00

l2tp_netlink.c

l2tp: avoid deadlock in l2tp stats update

2013-03-20 12:10:39 -04:00

l2tp_ppp.c

l2tp: unhash l2tp sessions on delete, not on free

2013-03-20 12:10:39 -04:00

Makefile

l2tp: introduce L2TPv3 IP encapsulation support for IPv6

2012-05-01 09:30:55 -04:00