diff options
author | Li RongQing <roy.qing.li@gmail.com> | 2014-10-18 17:33:38 +0800 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2014-10-18 13:04:09 -0400 |
commit | a6d4518da371b0d21512ef0f641928d6f99ee70f (patch) | |
tree | d2cd98564a10f6cbf52492765d383f7959f4f001 /net/dsa/slave.c | |
parent | fc6fb41cd64fd810bcc69fe9776d2f500778f38f (diff) | |
download | talos-op-linux-a6d4518da371b0d21512ef0f641928d6f99ee70f.tar.gz talos-op-linux-a6d4518da371b0d21512ef0f641928d6f99ee70f.zip |
ipv6: fix a potential use after free in sit.c
pskb_may_pull() maybe change skb->data and make iph pointer oboslete,
fix it by geting ip header length directly.
Fixes: ca15a078 (sit: generate icmpv6 error when receiving icmpv4 error)
Cc: Oussama Ghorbel <ghorbel@pivasoftware.com>
Signed-off-by: Li RongQing <roy.qing.li@gmail.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/dsa/slave.c')
0 files changed, 0 insertions, 0 deletions