original_kernel/net
Herbert Xu b5505c6e10 [IPSEC]: Check validity of direction in xfrm_policy_byid
The function xfrm_policy_byid takes a dir argument but finds the policy
using the index instead.  We only use the dir argument to update the
policy count for that direction.  Since the user can supply any value
for dir, this can corrupt our policy count.

I know this is the problem because a few days ago I was deleting
policies by hand using indicies and accidentally typed in the wrong
direction.  It still deleted the policy and at the time I thought
that was cool.  In retrospect it isn't such a good idea :)

I decided against letting it delete the policy anyway just in case
we ever remove the connection between indicies and direction.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-05-14 02:15:47 -07:00
..
802
8021q
appletalk
atm
ax25
bluetooth Merge branch 'upstream-fixes' of master.kernel.org:/pub/scm/linux/kernel/git/jikos/hid 2007-05-11 09:56:05 -07:00
bridge
core [NET] link_watch: Always schedule urgent events 2007-05-10 23:45:28 -07:00
dccp
decnet
econet
ethernet
ieee80211
ipv4 [NETFILTER]: iptable_raw: ignore short packets sent by SOCK_RAW sockets 2007-05-10 23:47:59 -07:00
ipv6 [NETFILTER]: Clean up table initialization 2007-05-10 23:47:43 -07:00
ipx
irda
iucv
key
lapb
llc
mac80211 [MAC80211]: include <linux/delay.h> instead of <asm/delay.h> 2007-05-10 23:45:09 -07:00
netfilter [NETFILTER]: xt_conntrack: add compat support 2007-05-10 23:48:00 -07:00
netlabel
netlink
netrom
packet
rfkill
rose
rxrpc
sched [NET_SCHED]: Avoid requeue warning on dev_deactivate 2007-05-10 23:47:42 -07:00
sctp [SCTP]: Do not include ABORT chunk header in the notification. 2007-05-10 23:45:31 -07:00
sunrpc
tipc
unix
wanrouter
wireless
x25
xfrm [IPSEC]: Check validity of direction in xfrm_policy_byid 2007-05-14 02:15:47 -07:00
Kconfig
Makefile
TUNABLE
compat.c
nonet.c
socket.c
sysctl_net.c