[GIT] Networking

Some more fixes trickled in over the past few days:

1) PIM device names can overflow the IFNAMSIZ buffer unless we
   properly limit the allowed indexes, fix from Eric Dumazet.

2) Under heavy load we can OOPS in icmp reply processing due to
   an unchecked inet_putpeer() call.  Fix from Neal Cardwell.

3) SCTP round trip calculations need to use 64-bit math to avoid
   overflows, fix from Schoch Christian.

4) Fix a memory leak and an error return flub in SCTP and IRDA
   triggerable by userspace.  Fix from Tommi Rantala and found by
   the syscall fuzzer (trinity).

5) MLX4 driver gives bogus size to memcpy() call, fix from Amir
   Vadai.

6) Fix length calculation in VHOST descriptor translation, from
   Michael S. Tsirkin.

7) Ambassador ATM driver loops forever while loading firmware, fix
   from Dan Carpenter.

8) Over MTU packets in openvswitch warn about wrong device, fix
   from Jesse Gross.

9) Netfilter IPSET's netlink code can overrun a string buffer
   because it's not properly limited to IFNAMSIZ.  Fix from
   Florian Westphal.

10) PCAN USB driver sets wrong timestamp in SKB, from Oliver
    Hartkopp.

11) Make sure the RX ifindex always has a valid value in the
    CAN BCM driver, even if we haven't received a frame yet.
    Fix also from Oliver Hartkopp.

Please pull, thanks a lot!

The following changes since commit 194d9831f0419b5125dc94ec0ece4434d8ef74f0:

  Merge tag 'sound-3.7' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound (2012-11-24 08:32:11 -1000)

are available in the git repository at:


  git://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git master

for you to fetch changes up to a45085f6a7801f95cd5682290195224e268627fd:

  Merge branch 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jesse/openvswitch (2012-11-28 18:00:47 -0500)

----------------------------------------------------------------

Amir Vadai (1):
      net/mlx4_en: Can set maxrate only for TC0

Bjørn Mork (1):
      net: qmi_wwan: add Huawei E173

Dan Carpenter (1):
      atm: forever loop loading ambassador firmware

David S. Miller (2):
      Merge branch 'master' of git://1984.lsi.us.es/nf
      Merge branch 'fixes' of git://git.kernel.org/.../jesse/openvswitch

Eric Dumazet (1):
      net: ipmr: limit MRT_TABLE identifiers

Florian Westphal (1):
      netfilter: ipset: fix netiface set name overflow

Jesse Gross (1):
      openvswitch: Print device when warning about over MTU packets.

Jiri Pirko (1):
      team: fix hw_features setup

Mehak Mahajan (1):
      openvswitch: Store flow key len if ARP opcode is not request or reply.

Michael S. Tsirkin (1):
      vhost: fix length for cross region descriptor

Neal Cardwell (1):
      ipv4: avoid passing NULL to inet_putpeer() in icmpv4_xrlim_allow()

Oliver Hartkopp (2):
      can: peak_usb: fix hwtstamp assignment
      can: bcm: initialize ifindex for timeouts without previous frame reception

Schoch Christian (1):
      sctp: Error in calculation of RTTvar

Tommi Rantala (3):
      sctp: fix memory leak in sctp_datamsg_from_user() when copy from user space fails
      sctp: fix -ENOMEM result with invalid user space pointer in sendto() syscall
      irda: irttp: fix memory leak in irttp_open_tsap() error path

 drivers/atm/ambassador.c                       |  1 +
 drivers/net/can/usb/peak_usb/pcan_usb.c        |  8 ++++++--
 drivers/net/can/usb/peak_usb/pcan_usb_pro.c    |  8 ++++++--
 drivers/net/ethernet/mellanox/mlx4/en_dcb_nl.c |  2 +-
 drivers/net/team/team.c                        |  4 +++-
 drivers/net/usb/qmi_wwan.c                     |  1 +
 drivers/vhost/vhost.c                          |  2 +-
 net/can/bcm.c                                  |  3 +++
 net/ipv4/icmp.c                                |  3 ++-
 net/ipv4/ipmr.c                                |  4 ++++
 net/irda/irttp.c                               |  1 +
 net/netfilter/ipset/ip_set_hash_netiface.c     |  2 +-
 net/openvswitch/flow.c                         | 14 +++++---------
 net/openvswitch/vport-netdev.c                 |  2 +-
 net/sctp/chunk.c                               | 20 ++++++++++++++------
 net/sctp/socket.c                              |  4 ++--
 net/sctp/transport.c                           |  2 +-
 17 files changed, 53 insertions(+), 28 deletions(-)
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

David, Willy pointed me to the recent splice crash fix
(do_tcp_sendpages and non-0-order pages). It's apparently easily
user-triggerable.. Should I take the patch directly, or do you have a
tree to pull. Don't want to make a release with a known oopser..

          Linus
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

From: Linus Torvalds <torvalds@linux-foundation.org>
Date: Sun, 2 Dec 2012 16:13:30 -0800

> David, Willy pointed me to the recent splice crash fix
> (do_tcp_sendpages and non-0-order pages). It's apparently easily
> user-triggerable.. Should I take the patch directly, or do you have a
> tree to pull. Don't want to make a release with a known oopser..

I have a tree to pull.  Coming in a few minutes.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html