Sridhar Samudrala c164a9ba0a Fix sctp privilege elevation (CVE-2006-3745) ... sctp_make_abort_user() now takes the msg_len along with the msg so that we don't have to recalculate the bytes in iovec. It also uses memcpy_fromiovec() so that we don't go beyond the length allocated. It is good to have this fix even if verify_iovec() is fixed to return error on overflow. Signed-off-by: Sridhar Samudrala <sri@us.ibm.com> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>		2006-08-22 12:52:23 -07:00
..
command.h	…
constants.h	…
sctp.h	Fix sctp privilege elevation (CVE-2006-3745)	2006-08-22 12:52:23 -07:00
sm.h	Fix sctp privilege elevation (CVE-2006-3745)	2006-08-22 12:52:23 -07:00
structs.h	[SCTP]: ADDIP: Don't use an address as source until it is ASCONF-ACKed	2006-07-21 14:49:25 -07:00
tsnmap.h	…
ulpevent.h	…
ulpqueue.h	…
user.h	[SCTP]: Verify all the paths to a peer via heartbeat before using them.	2006-07-21 14:48:50 -07:00