| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <20120717.073650.1950536711269323582.davem@davemloft.net>
Date: Tue, 17 Jul 2012 07:36:50 -0700 (PDT)
From: David Miller <davem@...emloft.net>
To: torvalds@...ux-foundation.org
CC: akpm@...ux-foundation.org, netdev@...r.kernel.org,
linux-kernel@...r.kernel.org
Subject: [GIT] Networking
I know this looks like a lot more than you want to see right now,
however a) the stuff here are real OOPS'ers, memory leaks, and
regressions and b) it's been a full 2 weeks since I last sent bug
fixes your way.
If it makes you feel any better, my default has been to toss fixes
into net-next unless it was really serious like the stuff below.
I have a CIPSO ipv4 option processing oops'er I intend to work on
fixing myself if the maintainer of the code doesn't look at it in the
24 hours.
1) IPVS oops'ers:
a) Should not reset skb->nf_bridge in forwarding hook (Lin Ming)
b) 3.4 commit can cause ip_vs_control_cleanup to be invoked after
the ipvs_core_ops are unregistered during rmmod (Julian ANastasov)
2) ixgbevf bringup failure can crash in TX descriptor cleanup (Alexander Duyck)
3) AX25 switch missing break statement hoses ROSE sockets (Alan Cox)
4) CAIF accesses freed per-net memory (Sjur Brandeland)
5) Network cgroup code has out-or-bounds accesses (Eric DUmazet), and accesses
freed memory (Gao Feng)
6) Fix a crash in SCTP reported by Dave Jones caused by freeing an association
still on a list (Neil HOrman)
7) __netdev_alloc_skb() regresses on GFP_DMA using drivers because that GFP
flag is not being retained for the allocation (Eric Dumazet).
8) Missing NULL hceck in sch_sfb netlink message parsing (Alan Cox)
9) bnx2 crashes because TX index iteration is not bounded correctly (Michael
Chan)
10) IPoIB generates warnings in TCP queue collapsing (via
skb_try_coalesce) because it does not set skb->truesize correctly
(Eric Dumazet)
11) vlan_info objects leak for the implicit vlan with ID 0 (Amir Hanania)
12) A fix for TX time stamp handling in gianfar does not transfer
socket ownership from one packet to another correctly, resulting
in a socket write space imbalance (Eric Dumazet)
13) Julia Lawall found several cases where we do a list iteration, and
then at the loop termination unconditionally assume we ended up with
real list object, rather than the list head itself (CNIC, RXRPC,
mISDN).
14) The bonding driver handles procfs moving incorrectly when a device
it manages is moved from one namespace to another (Eric Biederman)
15) Missing memory barriers in stmmac descriptor accesses result in
various crashes (Deepak Sikri)
16) Fix handling of broadcast packets in batman-adv (Simon Wunderlich)
17) Properly check the sanity of sendmsg() lengths in ieee802154's
dgram_sendmsg(). Dave Jones and others have hit and reported this
bug (Sasha Levin)
18) Some drivers (b44 and b43legacy) on 64-bit machines stopped
working because of how netdev_alloc_skb() was adjusted. Such
drivers should now use alloc_skb() for obtaining bounce buffers.
(Eric Dumazet)
19) atl1c mis-managed it's link state in that it stops the queue by
hand on link down. The generic networking takes care of that and
this double stop locks the queue down. So simply removing the
driver's queue stop call fixes the problem (Cloud Ren)
20) Fix out-of-memory due to mis-accounting in net_em packet scheduler
(Eric Dumazet)
21) If DCB and SR-IOV are configured at the same time in IXGBE the chip
will hang because this is not supported (Alexander Duyck)
22) A commit to stop drivers using netdev->base_addr broke the CNIC
driver (Michael Chan)
23) Timeout regression in ipset caused by an attempt to fix an overflow
bug (Jozsef Kadlecsik).
24) mac80211 minstrel code allocates memory using incorrect size
(Thomas Huehn)
25) llcp_sock_getname() needs to check for a NULL device otherwise we
OOPS (Sasha Levin)
26) mwifiex leaks memory (Bing Zhao)
27) Propagate iwlwifi fix to iwlegacy, even when we're not associated
we need to monitor for stuck queues in the watchdog handler
(Stanislaw Geuszka)
Please pull, thanks a lot.
The following changes since commit 9e85a6f9dc231f3ed3c1dc1b12217505d970142a:
Merge tag 'clk-fixes-for-linus' of git://git.linaro.org/people/mturquette/linux (2012-07-03 18:06:49 -0700)
are available in the git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/davem/net master
for you to fetch changes up to 602e65a3b0c4f6b09fba19817ff798647a08e706:
Merge branch 'master' of git://1984.lsi.us.es/nf (2012-07-17 03:19:33 -0700)
----------------------------------------------------------------
Alan Cox (2):
sch_sfb: Fix missing NULL check
ax25: Fix missing break
Alexander Duyck (2):
ixgbe: DCB and SR-IOV can not co-exist and will cause hangs
ixgbevf: Fix panic when loading driver
Amir Hanania (1):
net: Fix memory leak - vlan_info struct
Bing Zhao (1):
mwifiex: fix Coverity SCAN CID 709078: Resource leak (RESOURCE_LEAK)
Bjørn Mork (1):
net: qmi_wwan: add ZTE MF60
Bruce Allan (1):
e1000e: fix test for PHY being accessible on 82577/8/9 and I217
Cloud Ren (1):
atl1c: fix issue of transmit queue 0 timed out
David Daney (1):
netdev/phy: Fixup lockdep warnings in mdio-mux.c
David S. Miller (4):
Merge branch 'master' of git://1984.lsi.us.es/nf
Merge tag 'batman-adv-fix-for-davem' of git://git.open-mesh.org/linux-merge
Merge branch 'master' of git://git.kernel.org/.../jkirsher/net
Merge branch 'master' of git://1984.lsi.us.es/nf
Deepak Sikri (2):
stmmac: Fix for nfs hang on multiple reboot
stmmac: Fix for higher mtu size handling
Dmitry Eremin-Solenikov (1):
MAINTAINERS: reflect actual changes in IEEE 802.15.4 maintainership
Eliad Peller (1):
mac80211: destroy assoc_data correctly if assoc fails
Emmanuel Grumbach (1):
iwlegacy: don't mess up the SCD when removing a key
Eric Dumazet (6):
net: dont use __netdev_alloc_skb for bounce buffer
netem: add limitation to reordered packets
net: cgroup: fix out of bounds accesses
gianfar: fix potential sk_wmem_alloc imbalance
IPoIB: fix skb truesize underestimatiom
net: respect GFP_DMA in __netdev_alloc_skb()
Eric W. Biederman (2):
bonding: Manage /proc/net/bonding/ entries from the netdev events
bonding: debugfs and network namespaces are incompatible
Gao feng (2):
cgroup: fix panic in netprio_cgroup
net: cgroup: fix access the unallocated memory in netprio cgroup
John W. Linville (1):
Merge branch 'master' of git://git.kernel.org/.../linville/wireless into for-davem
Jozsef Kadlecsik (1):
netfilter: ipset: timeout fixing bug broke SET target special timeout value
Julia Lawall (3):
drivers/isdn/mISDN/stack.c: remove invalid reference to list iterator variable
net/rxrpc/ar-peer.c: remove invalid reference to list iterator variable
drivers/net/ethernet/broadcom/cnic.c: remove invalid reference to list iterator variable
Julian Anastasov (1):
ipvs: fix oops in ip_vs_dst_event on rmmod
Lin Ming (1):
ipvs: fix oops on NAT reply in br_nf context
Michael Chan (2):
cnic: Don't use netdev->base_addr
bnx2: Fix bug in bnx2_free_tx_skbs().
Narendra K (1):
ixgbevf: Prevent RX/TX statistics getting reset to zero
Neil Horman (1):
sctp: Fix list corruption resulting from freeing an association on a list
Pablo Neira Ayuso (1):
netfilter: nf_ct_ecache: fix crash with multiple containers, one shutting down
Sasha Levin (2):
ieee802154: verify packet size before trying to allocate it
NFC: Prevent NULL deref when getting socket name
Simon Wunderlich (1):
batman-adv: check incoming packet type for bla
Sjur Brændeland (1):
caif: Fix access to freed pernet memory
Stanislaw Gruszka (2):
rt2x00usb: fix indexes ordering on RX queue kick
iwlegacy: always monitor for stuck queues
Thomas Huehn (1):
mac80211: correct size the argument to kzalloc in minstrel_ht
Tushar Dave (1):
e1000e: Correct link check logic for 82571 serdes
MAINTAINERS | 3 +-
drivers/infiniband/ulp/ipoib/ipoib_ib.c | 12 ++++---
drivers/isdn/mISDN/stack.c | 4 +--
drivers/net/bonding/bond_debugfs.c | 2 +-
drivers/net/bonding/bond_main.c | 9 ++++--
drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 1 -
drivers/net/ethernet/broadcom/b44.c | 4 +--
drivers/net/ethernet/broadcom/bnx2.c | 6 ++--
drivers/net/ethernet/broadcom/cnic.c | 10 ++++--
drivers/net/ethernet/freescale/gianfar.c | 7 ++--
drivers/net/ethernet/intel/e1000e/82571.c | 3 ++
drivers/net/ethernet/intel/e1000e/ich8lan.c | 42 ++++++++++++++++++------
drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 5 +++
drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 15 ++-------
drivers/net/ethernet/stmicro/stmmac/ring_mode.c | 3 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 3 ++
drivers/net/phy/mdio-mux.c | 10 ++++--
drivers/net/usb/qmi_wwan.c | 18 +++++++++++
drivers/net/wireless/b43legacy/dma.c | 2 +-
drivers/net/wireless/iwlegacy/4965-mac.c | 4 +--
drivers/net/wireless/iwlegacy/common.c | 14 ++++----
drivers/net/wireless/mwifiex/cfg80211.c | 1 +
drivers/net/wireless/rt2x00/rt2x00usb.c | 2 +-
include/net/ip_vs.h | 2 +-
include/net/netfilter/nf_conntrack_ecache.h | 2 +-
net/8021q/vlan.c | 3 ++
net/ax25/af_ax25.c | 1 +
net/batman-adv/bridge_loop_avoidance.c | 15 ++++++---
net/batman-adv/bridge_loop_avoidance.h | 5 +--
net/batman-adv/soft-interface.c | 6 +++-
net/caif/caif_dev.c | 2 +-
net/core/dev.c | 8 +++--
net/core/netprio_cgroup.c | 78 +++++++++++++++++++++++++++++++++------------
net/core/skbuff.c | 2 +-
net/ieee802154/dgram.c | 12 +++----
net/mac80211/mlme.c | 6 ++--
net/mac80211/rc80211_minstrel_ht.c | 2 +-
net/netfilter/ipvs/ip_vs_ctl.c | 5 +--
net/netfilter/xt_set.c | 4 ++-
net/nfc/llcp/sock.c | 2 +-
net/rxrpc/ar-peer.c | 2 +-
net/sched/sch_netem.c | 42 +++++++++---------------
net/sched/sch_sfb.c | 2 ++
net/sctp/input.c | 7 ++--
net/sctp/socket.c | 12 +++++--
45 files changed, 256 insertions(+), 144 deletions(-)
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists