kernel.git/net/atm, branch linux-2.6.27.y

ATM: CVE-2008-5079: duplicate listen() on socket corrupts the vcc table

2008-12-13T23:29:17Z

commit 17b24b3c97498935a2ef9777370b1151dfed3f6f upstream. As reported by Hugo Dias that it is possible to cause a local denial of service attack by calling the svc_listen function twice on the same socket and reading /proc/net/atm/*vc Signed-off-by: Chas Williams Signed-off-by: David S. Miller Signed-off-by: Greg Kroah-Hartman

atm: fix const assignment/discard warnings in the ATM networking driver

2008-07-30T23:31:46Z

Fix const assignment/discard warnings in the ATM networking driver. The lane2_assoc_ind() function needed its arguments changing to match changes in the lane2_ops struct (patch 61c33e012964ce358b42d2a1e9cd309af5dab02b "atm: use const where reasonable"). Signed-off-by: David Howells Acked-by: Chas Williams Signed-off-by: Andrew Morton Signed-off-by: David S. Miller

netns: Use net_eq() to compare net-namespaces for optimization.

2008-07-20T05:34:43Z

Without CONFIG_NET_NS, namespace is always &init_net. Compiler will be able to omit namespace comparisons with this patch. Signed-off-by: YOSHIFUJI Hideaki Signed-off-by: David S. Miller

atm: use const where reasonable

2008-06-17T23:20:06Z

From: Mitchell Blank Jr Signed-off-by: Chas Williams Signed-off-by: David S. Miller

atm: [br2864] fix routed vcmux support

2008-06-17T00:18:18Z

From: Eric Kinzie Signed-off-by: Chas Williams Signed-off-by: David S. Miller

atm: [br2684] Fix oops due to skb->dev being NULL

2008-06-17T00:15:33Z

It happens that if a packet arrives in a VC between the call to open it on the hardware and the call to change the backend to br2684, br2684_regvcc processes the packet and oopses dereferencing skb->dev because it is NULL before the call to br2684_push(). Signed-off-by: Jorge Boncompte [DTI2] Signed-off-by: Chas Williams

Revert "atm: Do not free already unregistered net device."

2008-05-06T07:00:16Z

This reverts commit 65e4113684e50cee75357ce10dc9026b0929e4e9. Unlike the other cases Pavel fixed, this case did not setup a netdev->destructor of free_netdev, therefore this change was not correct. Signed-off-by: David S. Miller

atm: Bad locking on br2684_devs modifications.

2008-05-05T01:00:36Z

The list_del happens under read-locked devs_lock. Signed-off-by: Pavel Emelyanov Signed-off-by: David S. Miller

atm: Do not free already unregistered net device.

2008-05-05T01:00:05Z

Both br2684_push and br2684_exit do so, but unregister_netdev() releases the device itself. Signed-off-by: Pavel Emelyanov Signed-off-by: David S. Miller

atm: assign PDE->data before gluing PDE into /proc tree

2008-05-02T11:08:30Z

Simply replace proc_create and further data assigned with proc_create_data. proc_atm_dev_ops holds proper referrence. Signed-off-by: Denis V. Lunev Signed-off-by: David S. Miller