diff options
author | Jon Paul Maloy <jon.maloy@ericsson.com> | 2017-02-23 11:10:31 -0500 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2017-02-24 11:42:54 -0500 |
commit | 681a55d71799b575f46fe94121728cf67460d1c3 (patch) | |
tree | 571316773e7f47c7bdb2d86fa599c93de0d76eaa /drivers/net/vxlan.c | |
parent | fbf68229ffe7e12c78b55714de08c1c34a2e2047 (diff) | |
download | talos-op-linux-681a55d71799b575f46fe94121728cf67460d1c3.tar.gz talos-op-linux-681a55d71799b575f46fe94121728cf67460d1c3.zip |
tipc: move premature initilalization of stack variables
In the function tipc_rcv() we initialize a couple of stack variables
from the message header before that same header has been validated.
In rare cases when the arriving header is non-linar, the validation
function itself may linearize the buffer by calling skb_may_pull(),
while the wrongly initialized stack fields are not updated accordingly.
We fix this in this commit.
Reported-by: Matthew Wong <mwong@sonusnet.com>
Signed-off-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/net/vxlan.c')
0 files changed, 0 insertions, 0 deletions