1. 15 3月, 2014 6 次提交
  2. 14 3月, 2014 1 次提交
  3. 13 3月, 2014 1 次提交
  4. 11 3月, 2014 1 次提交
  5. 08 3月, 2014 1 次提交
  6. 07 3月, 2014 2 次提交
  7. 05 3月, 2014 1 次提交
  8. 03 3月, 2014 3 次提交
  9. 01 3月, 2014 6 次提交
  10. 19 2月, 2014 1 次提交
  11. 18 2月, 2014 5 次提交
  12. 11 2月, 2014 1 次提交
  13. 10 2月, 2014 1 次提交
  14. 28 1月, 2014 1 次提交
  15. 23 1月, 2014 1 次提交
  16. 19 1月, 2014 1 次提交
  17. 16 1月, 2014 1 次提交
  18. 15 1月, 2014 1 次提交
  19. 06 1月, 2014 1 次提交
    • D
      net: 6lowpan: fix lowpan_header_create non-compression memcpy call · 965801e1
      Daniel Borkmann 提交于
      In function lowpan_header_create(), we invoke the following code
      construct:
      
        struct ipv6hdr *hdr;
        ...
        hdr = ipv6_hdr(skb);
        ...
        if (...)
          memcpy(hc06_ptr + 1, &hdr->flow_lbl[1], 2);
        else
          memcpy(hc06_ptr, &hdr, 4);
      
      Where the else path of the condition, that is, non-compression
      path, calls memcpy() with a pointer to struct ipv6hdr *hdr as
      source, thus two levels of indirection. This cannot be correct,
      and likely only one level of pointer was intended as source
      buffer for memcpy() here.
      
      Fixes: 44331fe2 ("IEEE802.15.4: 6LoWPAN basic support")
      Signed-off-by: NDaniel Borkmann <dborkman@redhat.com>
      Cc: Alexander Smirnov <alex.bluesman.smirnov@gmail.com>
      Cc: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
      Cc: Werner Almesberger <werner@almesberger.net>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      965801e1
  20. 28 12月, 2013 1 次提交
  21. 17 12月, 2013 3 次提交