linux-toradex.git/net/core/sock_diag.c, branch v3.10.30

sock_diag: fix filter code sent to userspace

2013-06-11T05:23:32+00:00

Filters need to be translated to real BPF code for userland, like SO_GETFILTER.

Signed-off-by: Nicolas Dichtel 
Signed-off-by: David S. Miller

sock_diag: allow to dump bpf filters

2013-04-29T17:21:30+00:00

This patch allows to dump BPF filters attached to a socket with
SO_ATTACH_FILTER.
Note that we check CAP_SYS_ADMIN before allowing to dump this info.

For now, only AF_PACKET sockets use this feature.

Signed-off-by: Nicolas Dichtel 
Signed-off-by: David S. Miller

sock_diag: Simplify sock_diag_handlers[] handling in __sock_diag_rcv_msg

2013-02-23T18:51:54+00:00

The sock_diag_lock_handler() and sock_diag_unlock_handler() actually
make the code less readable. Get rid of them and make the lock usage
and access to sock_diag_handlers[] clear on the first sight.

Signed-off-by: Mathias Krause 
Signed-off-by: David S. Miller

sock_diag: Fix out-of-bounds access to sock_diag_handlers[]

2013-02-23T18:51:54+00:00

Userland can send a netlink message requesting SOCK_DIAG_BY_FAMILY
with a family greater or equal then AF_MAX -- the array size of
sock_diag_handlers[]. The current code does not test for this
condition therefore is vulnerable to an out-of-bound access opening
doors for a privilege escalation.

Signed-off-by: Mathias Krause 
Acked-by: Eric Dumazet 
Signed-off-by: David S. Miller

netlink: hide struct module parameter in netlink_kernel_create

2012-09-08T22:46:30+00:00

This patch defines netlink_kernel_create as a wrapper function of
__netlink_kernel_create to hide the struct module *me parameter
(which seems to be THIS_MODULE in all existing netlink subsystems).

Suggested by David S. Miller.

Signed-off-by: Pablo Neira Ayuso 
Signed-off-by: David S. Miller

net: make sock diag per-namespace

2012-07-17T05:31:34+00:00

Before this patch sock_diag works for init_net only and dumps
information about sockets from all namespaces.

This patch expands sock_diag for all name-spaces.
It creates a netlink kernel socket for each netns and filters
data during dumping.

v2: filter accoding with netns in all places
    remove an unused variable.

Cc: "David S. Miller" 
Cc: Alexey Kuznetsov 
Cc: James Morris 
Cc: Hideaki YOSHIFUJI 
Cc: Patrick McHardy 
Cc: Pavel Emelyanov 
CC: Eric Dumazet 
Cc: linux-kernel@vger.kernel.org
Cc: netdev@vger.kernel.org
Signed-off-by: Andrew Vagin 
Acked-by: Pavel Emelyanov 
Signed-off-by: David S. Miller

netlink: add netlink_kernel_cfg parameter to netlink_kernel_create

2012-06-29T23:46:02+00:00

This patch adds the following structure:

struct netlink_kernel_cfg {
        unsigned int    groups;
        void            (*input)(struct sk_buff *skb);
        struct mutex    *cb_mutex;
};

That can be passed to netlink_kernel_create to set optional configurations
for netlink kernel sockets.

I've populated this structure by looking for NULL and zero parameters at the
existing code. The remaining parameters that always need to be set are still
left in the original interface.

That includes optional parameters for the netlink socket creation. This allows
easy extensibility of this interface in the future.

This patch also adapts all callers to use this new interface.

Signed-off-by: Pablo Neira Ayuso 
Signed-off-by: David S. Miller

sock_diag: Do not use RTA_PUT() macros

2012-06-27T22:36:43+00:00

Signed-off-by: Thomas Graf 
Signed-off-by: David S. Miller

sock_diag: add SK_MEMINFO_BACKLOG

2012-06-04T15:27:40+00:00

Adding socket backlog len in INET_DIAG_SKMEMINFO is really useful to
diagnose various TCP problems.

Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller

net: sock_diag_handler structs can be const

2012-04-26T00:46:59+00:00

read only, so change it to const.

Signed-off-by: Shan Wei 
Acked-by: Pavel Emelyanov 
Signed-off-by: David S. Miller