[IPV6]: fix lockup via /proc/net/ip6_flowlabel (CVE-2006-5619)
authorJames Morris <jmorris@namei.org>
Sun, 5 Nov 2006 08:00:45 +0000 (09:00 +0100)
committerAdrian Bunk <bunk@stusta.de>
Sun, 5 Nov 2006 08:00:45 +0000 (09:00 +0100)
commitd1ce361a6c0115e2ef500e9e7dfe77763d287fcd
treecc00ae16fafd01c4293d404d3c5c53a61b40f49c
parente4943436e258e9f993be30d7ab41f7202f8adbf7
[IPV6]: fix lockup via /proc/net/ip6_flowlabel (CVE-2006-5619)

There's a bug in the seqfile handling for /proc/net/ip6_flowlabel, where,
after finding a flowlabel, the code will loop forever not finding any
further flowlabels, first traversing the rest of the hash bucket then just
looping.

This patch fixes the problem by breaking after the hash bucket has been
traversed.

Note that this bug can cause lockups and oopses, and is trivially invoked
by an unpriveleged user.

Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Adrian Bunk <bunk@stusta.de>
net/ipv6/ip6_flowlabel.c