David Ahern 61b91eb33a ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference ... Gwangun Jung reported a slab-out-of-bounds access in fib_nh_match: fib_nh_match+0xf98/0x1130 linux-6.0-rc7/net/ipv4/fib_semantics.c:961 fib_table_delete+0x5f3/0xa40 linux-6.0-rc7/net/ipv4/fib_trie.c:1753 inet_rtm_delroute+0x2b3/0x380 linux-6.0-rc7/net/ipv4/fib_frontend.c:874 Separate nexthop objects are mutually exclusive with the legacy multipath spec. Fix fib_nh_match to return if the config for the to be deleted route contains a multipath spec while the fib_info is using a nexthop object. Fixes: 493ced1ac4 ("ipv4: Allow routes to use nexthop objects") Fixes: 6bf92d70e6 ("net: ipv4: fix route with nexthop object delete warning") Reported-by: Gwangun Jung <exsociety@gmail.com> Signed-off-by: David Ahern <dsahern@kernel.org> Reviewed-by: Ido Schimmel <idosch@nvidia.com> Tested-by: Ido Schimmel <idosch@nvidia.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2022-10-07 08:47:08 +01:00
..
bpfilter
netfilter	netfilter: nft_fib: Fix for rpath check with VRF devices	2022-09-28 13:33:26 +02:00
af_inet.c	tcp: Set NULL to sk->sk_prot->h.hashinfo.	2022-09-20 10:21:49 -07:00
ah4.c	xfrm: ah: add extack to ah_init_state, ah6_init_state	2022-09-29 07:17:59 +02:00
arp.c
bpf_tcp_ca.c
cipso_ipv4.c
datagram.c
devinet.c
esp4.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next	2022-10-03 07:52:13 +01:00
esp4_offload.c
fib_frontend.c
fib_lookup.h
fib_notifier.c
fib_rules.c
fib_semantics.c	ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference	2022-10-07 08:47:08 +01:00
fib_trie.c
fou.c
gre_demux.c
gre_offload.c
icmp.c
igmp.c
inet_connection_sock.c	tcp: Set NULL to sk->sk_prot->h.hashinfo.	2022-09-20 10:21:49 -07:00
inet_diag.c
inet_fragment.c
inet_hashtables.c	once: rename _SLOW to _SLEEPABLE	2022-10-03 17:34:32 -07:00
inet_timewait_sock.c	tcp: Don't allocate tcp_death_row outside of struct netns_ipv4.	2022-09-20 10:21:49 -07:00
inetpeer.c
ip_forward.c
ip_fragment.c
ip_gre.c
ip_input.c
ip_options.c
ip_output.c	net: shrink struct ubuf_info	2022-09-28 18:51:25 -07:00
ip_sockglue.c
ip_tunnel.c
ip_tunnel_core.c	net: Add helper function to parse netlink msg of ip_tunnel_parm	2022-10-03 07:59:06 +01:00
ip_vti.c
ipcomp.c	xfrm: ipcomp: add extack to ipcomp{4,6}_init_state	2022-09-29 07:18:00 +02:00
ipconfig.c
ipip.c	net: Add helper function to parse netlink msg of ip_tunnel_parm	2022-10-03 07:59:06 +01:00
ipmr.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-09-22 13:02:10 -07:00
ipmr_base.c
Kconfig
Makefile
metrics.c
netfilter.c
netlink.c
nexthop.c
ping.c
proc.c	tcp: Don't allocate tcp_death_row outside of struct netns_ipv4.	2022-09-20 10:21:49 -07:00
protocol.c
raw.c
raw_diag.c
route.c
syncookies.c
sysctl_net_ipv4.c	tcp: Introduce optional per-netns ehash.	2022-09-20 10:21:50 -07:00
tcp.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-10-03 17:44:18 -07:00
tcp_bbr.c
tcp_bic.c
tcp_bpf.c
tcp_cdg.c
tcp_cong.c
tcp_cubic.c
tcp_dctcp.c
tcp_dctcp.h
tcp_diag.c	tcp: Access &tcp_hashinfo via net.	2022-09-20 10:21:49 -07:00
tcp_fastopen.c
tcp_highspeed.c
tcp_htcp.c
tcp_hybla.c
tcp_illinois.c
tcp_input.c
tcp_ipv4.c	tcp: Introduce optional per-netns ehash.	2022-09-20 10:21:50 -07:00
tcp_lp.c
tcp_metrics.c
tcp_minisocks.c	Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next	2022-10-03 13:02:49 -07:00
tcp_nv.c
tcp_offload.c	gro: add support of (hw)gro packets to gro stack	2022-10-03 12:38:34 +01:00
tcp_output.c	tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited	2022-09-30 12:37:45 +01:00
tcp_rate.c
tcp_recovery.c
tcp_scalable.c
tcp_timer.c
tcp_ulp.c
tcp_vegas.c
tcp_vegas.h
tcp_veno.c
tcp_westwood.c
tcp_yeah.c
tunnel4.c
udp.c	udp: Refactor udp_read_skb()	2022-09-26 11:00:19 -07:00
udp_bpf.c
udp_diag.c
udp_impl.h
udp_offload.c
udp_tunnel_core.c
udp_tunnel_nic.c
udp_tunnel_stub.c
udplite.c
xfrm4_input.c
xfrm4_output.c
xfrm4_policy.c
xfrm4_protocol.c
xfrm4_state.c
xfrm4_tunnel.c	xfrm: tunnel: add extack to ipip_init_state, xfrm6_tunnel_init_state	2022-09-29 07:18:00 +02:00