[kernel] r5248 - in dists/sarge/kernel/source/kernel-source-2.6.8-2.6.8/debian: . patches patches/series

[Simon Horman]

Author: horms
Date: Thu Jan  5 03:30:33 2006
New Revision: 5248

Added:
   dists/sarge/kernel/source/kernel-source-2.6.8-2.6.8/debian/patches/net-ipv6-flowlabel-refcnt.dpatch
Modified:
   dists/sarge/kernel/source/kernel-source-2.6.8-2.6.8/debian/changelog
   dists/sarge/kernel/source/kernel-source-2.6.8-2.6.8/debian/patches/series/2.6.8-17
Log:
  * net-ipv6-flowlabel-refcnt.dpatch
    [SECURITY] Fix refcnt of struct ip6_flowlabel; Local DoS
    From 2.6.14
    See CVE-2005-3806


Modified: dists/sarge/kernel/source/kernel-source-2.6.8-2.6.8/debian/changelog
==============================================================================
--- dists/sarge/kernel/source/kernel-source-2.6.8-2.6.8/debian/changelog	(original)
+++ dists/sarge/kernel/source/kernel-source-2.6.8-2.6.8/debian/changelog	Thu Jan  5 03:30:33 2006
@@ -347,12 +347,17 @@
     Potential local information leak
     CVE-NOMATCH
 
+  * net-ipv6-flowlabel-refcnt.dpatch
+    [SECURITY] Fix refcnt of struct ip6_flowlabel; Local DoS
+    From 2.6.14
+    See CVE-2005-3806
+
   [ dann frazier ]
   * mempolicy-check-mode.dpatch
     [SECURITY] Input validation in sys_set_mempolicy(); local DoS.
     See CAN-2005-3053
 
- -- Simon Horman <horms at verge.net.au>  Thu,  5 Jan 2006 12:11:28 +0900
+ -- Simon Horman <horms at verge.net.au>  Thu,  5 Jan 2006 12:25:52 +0900
 
 kernel-source-2.6.8 (2.6.8-16) unstable; urgency=low
 

Added: dists/sarge/kernel/source/kernel-source-2.6.8-2.6.8/debian/patches/net-ipv6-flowlabel-refcnt.dpatch
==============================================================================
--- (empty file)
+++ dists/sarge/kernel/source/kernel-source-2.6.8-2.6.8/debian/patches/net-ipv6-flowlabel-refcnt.dpatch	Thu Jan  5 03:30:33 2006
@@ -0,0 +1,25 @@
+commit 4ea6a8046bb49d43c950898f0cb4e1994ef6c89d
+tree cf7ab6f3a88ef7c66f28322febe18d7694ab27b9
+parent 444d1d9bb5b724f03344c9317bc01d54a9b39073
+author Yan Zheng <yanzheng at 21cn.com> Mon, 24 Oct 2005 19:55:23 +0800
+committer Arnaldo Carvalho de Melo <acme at mandriva.com> Tue, 25 Oct 2005 21:17:52 -0200
+
+    [IPV6]: Fix refcnt of struct ip6_flowlabel
+    
+    Signed-off-by: Yan Zheng <yanzheng at 21cn.com>
+    Acked-by: YOSHIFUJI Hideaki <yoshfuji at linux-ipv6.org>
+    Signed-off-by: Arnaldo Carvalho de Melo <acme at mandriva.com>
+
+diff --git a/net/ipv6/ip6_flowlabel.c b/net/ipv6/ip6_flowlabel.c
+index f841bde..bbbe80c 100644
+--- a/net/ipv6/ip6_flowlabel.c
++++ b/net/ipv6/ip6_flowlabel.c
+@@ -483,7 +483,7 @@ int ipv6_flowlabel_opt(struct sock *sk, 
+ 						goto done;
+ 					}
+ 					fl1 = sfl->fl;
+-					atomic_inc(&fl->users);
++					atomic_inc(&fl1->users);
+ 					break;
+ 				}
+ 			}

Modified: dists/sarge/kernel/source/kernel-source-2.6.8-2.6.8/debian/patches/series/2.6.8-17
==============================================================================
--- dists/sarge/kernel/source/kernel-source-2.6.8-2.6.8/debian/patches/series/2.6.8-17	(original)
+++ dists/sarge/kernel/source/kernel-source-2.6.8-2.6.8/debian/patches/series/2.6.8-17	Thu Jan  5 03:30:33 2006
@@ -84,3 +84,4 @@
 + mempolicy-undefined-nodes.dpatch
 + proc-legacy-loff-underflow.dpatch
 + dm-crypt-zero-key.dpatch
++ net-ipv6-flowlabel-refcnt.dpatch