linux-toradex.git/net, branch v2.6.19.2

[PATCH] NetLabel: correctly fill in unused CIPSOv4 level and category mappings

2007-01-10T19:05:23+00:00

Back when the original NetLabel patches were being changed to use Netlink
attributes correctly some code was accidentially dropped which set all of the
undefined CIPSOv4 level and category mappings to a sentinel value.  The result
is the mappings data in the kernel contains bogus mappings which always map to
zero.  Having level and category mappings that map to zero could result in the
kernel assigning incorrect security attributes to packets.

This patch restores the old/correct behavior by initializing the mapping
data to the correct sentinel value.

Signed-off-by: Paul Moore 
Signed-off-by: Chris Wright

[PATCH] IPV4/IPV6: Fix inet{,6} device initialization order.

2007-01-10T19:05:23+00:00

It is important that we only assign dev->ip{,6}_ptr
only after all portions of the inet{,6} are setup.

Otherwise we can receive packets before the multicast
spinlocks et al. are initialized.

Signed-off-by: David L Stevens 
Signed-off-by: David S. Miller 
Signed-off-by: Chris Wright

[PATCH] ebtables: don't compute gap before checking struct type

2007-01-10T19:05:22+00:00

We cannot compute the gap until we know we have a 'struct ebt_entry'
and not 'struct ebt_entries'.  Failure to check can cause crash.

Tested-by: Santiago Garcia Mantinan 
Acked-by: Al Viro 
Acked-by: Patrick McHardy 
Signed-off-by: Chuck Ebbert <76306.1226@compuserve.com>
Signed-off-by: Chris Wright

[PATCH] PKTGEN: Fix module load/unload races.

2007-01-10T19:05:21+00:00

Signed-off-by: David S. Miller 
Signed-off-by: Chris Wright

[PATCH] softmac: Fixed handling of deassociation from AP

2007-01-10T19:05:20+00:00

In 2.6.19 a deauthentication from the AP doesn't start a
reassociation by the softmac code. It appears that
mac->associnfo.associating must be set and the
ieee80211softmac_assoc_work function must be scheduled. This patch
fixes that.

Signed-off-by: Ulrich Kunitz 
Signed-off-by: John W. Linville 
Signed-off-by: Chris Wright

[PATCH] UDP: Fix reversed logic in udp_get_port()

2007-01-10T19:05:20+00:00

When this code was converted to use sk_for_each() the
logic for the "best hash chain length" code was reversed,
breaking everything.

The original code was of the form:

			size = 0;
			do {
				if (++size >= best_size_so_far)
					goto next;
			} while ((sk = sk->next) != NULL);
			best_size_so_far = size;
			best = result;
		next:;

and this got converted into:

			sk_for_each(sk2, node, head)
				if (++size < best_size_so_far) {
					best_size_so_far = size;
					best = result;
				}

Which does something very very different from the original.

Signed-off-by: David S. Miller 
Signed-off-by: Chris Wright

[PATCH] Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)

2007-01-10T19:05:19+00:00

With malformed packets it might be possible to overwrite internal
CMTP and CAPI data structures. This patch adds additional length
checks to prevent these kinds of remote attacks.

Signed-off-by: Marcel Holtmann 
Signed-off-by: Chris Wright

[PATCH] ieee80211softmac: Fix mutex_lock at exit of ieee80211_softmac_get_genie

2007-01-10T19:05:17+00:00

ieee80211softmac_wx_get_genie locks the associnfo mutex at
function exit. This patch fixes it. The patch is against Linus'
tree (commit af1713e0).

Signed-off-by: Ulrich Kunitz 
Signed-off-by: Michael Buesch 
Signed-off-by: Chris Wright

[PATCH] IrDA: Incorrect TTP header reservation

2006-12-11T19:32:39+00:00

We must reserve SAR + MAX_HEADER bytes for IrLMP to fit in.
This fixes an oops reported (and fixed) by Jeet Chaudhuri, when max_sdu_size
is greater than 0.

Signed-off-by: Samuel Ortiz 
Signed-off-by: David S. Miller 
Signed-off-by: Chris Wright

[PATCH] IPSEC: Fix inetpeer leak in ipv4 xfrm dst entries.

2006-12-11T19:32:39+00:00

We grab a reference to the route's inetpeer entry but
forget to release it in xfrm4_dst_destroy().

Bug discovered by Kazunori MIYAZAWA 

Signed-off-by: David S. Miller 
Signed-off-by: Chris Wright