[GIT] Networking

David Miller
2012-11-29T02:47:37Z

Some more fixes trickled in over the past few days:

1) PIM device names can overflow the IFNAMSIZ buffer unless we
properly limit the allowed indexes, fix from Eric Dumazet.

2) Under heavy load we can OOPS in icmp reply processing due to
an unchecked inet_putpeer() call. Fix from Neal Cardwell.

3) SCTP round trip calculations need to use 64-bit math to avoid
overflows, fix from Schoch Christian.

4) Fix a memory leak and an error return flub in SCTP and IRDA
triggerable by userspace. Fix from Tommi Rantala and found by
the syscall fuzzer (trinity).

5) MLX4 driver gives bogus size to memcpy() call, fix from Amir
Vadai.

6) Fix length calculation in VHOST descriptor translation, from
Michael S. Tsirkin.

7) Ambassador ATM driver loops forever while loading firmware, fix
from Dan Carpenter.

8) Over MTU packets in openvswitch warn about wrong device, fix
from Jesse Gross.

9) Netfilter IPSET's netlink code can overrun a string buffer
because it's not properly limited to IFNAMSIZ. Fix from
Florian Westphal.

10) PCAN USB driver sets wrong timestamp in SKB, from Oliver
Hartkopp.

11) Make sure the RX ifindex always has a valid value in the
CAN BCM driver, even if we haven't received a frame yet.
Fix also from Oliver Hartkopp.

Please pull, thanks a lot!

The following changes since commit 194d9831f0419b5125dc94ec0ece4434d8ef74f0:

Merge tag 'sound-3.7' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound (2012-11-24 08:32:11 -1000)

are available in the git repository at:

git://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git master

for you to fetch changes up to a45085f6a7801f95cd5682290195224e268627fd:

Merge branch 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jesse/openvswitch (2012-11-28 18:00:47 -0500)

----------------------------------------------------------------

Amir Vadai (1):
net/mlx4_en: Can set maxrate only for TC0

Bjørn Mork (1):
net: qmi_wwan: add Huawei E173

Dan Carpenter (1):
atm: forever loop loading ambassador firmware

David S. Miller (2):
Merge branch 'master' of git://1984.lsi.us.es/nf
Merge branch 'fixes' of git://git.kernel.org/.../jesse/openvswitch

Eric Dumazet (1):
net: ipmr: limit MRT_TABLE identifiers

Florian Westphal (1):
netfilter: ipset: fix netiface set name overflow

Jesse Gross (1):
openvswitch: Print device when warning about over MTU packets.

Jiri Pirko (1):
team: fix hw_features setup

Mehak Mahajan (1):
openvswitch: Store flow key len if ARP opcode is not request or reply.

Michael S. Tsirkin (1):
vhost: fix length for cross region descriptor

Neal Cardwell (1):
ipv4: avoid passing NULL to inet_putpeer() in icmpv4_xrlim_allow()

Oliver Hartkopp (2):
can: peak_usb: fix hwtstamp assignment
can: bcm: initialize ifindex for timeouts without previous frame reception

Schoch Christian (1):
sctp: Error in calculation of RTTvar

Tommi Rantala (3):
sctp: fix memory leak in sctp_datamsg_from_user() when copy from user space fails
sctp: fix -ENOMEM result with invalid user space pointer in sendto() syscall
irda: irttp: fix memory leak in irttp_open_tsap() error path

drivers/atm/ambassador.c | 1 +
drivers/net/can/usb/peak_usb/pcan_usb.c | 8 ++++++--
drivers/net/can/usb/peak_usb/pcan_usb_pro.c | 8 ++++++--
drivers/net/ethernet/mellanox/mlx4/en_dcb_nl.c | 2 +-
drivers/net/team/team.c | 4 +++-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/vhost/vhost.c | 2 +-
net/can/bcm.c | 3 +++
net/ipv4/icmp.c | 3 ++-
net/ipv4/ipmr.c | 4 ++++
net/irda/irttp.c | 1 +
net/netfilter/ipset/ip_set_hash_netiface.c | 2 +-
net/openvswitch/flow.c | 14 +++++---------
net/openvswitch/vport-netdev.c | 2 +-
net/sctp/chunk.c | 20 ++++++++++++++------
net/sctp/socket.c | 4 ++--
net/sctp/transport.c | 2 +-
17 files changed, 53 insertions(+), 28 deletions(-)