| commit | 1aa9d1a0e7eefcc61696e147d123453fc0016005 | [log] [tgz] |
|---|---|---|
| author | Eric Dumazet <edumazet@google.com> | Wed Nov 02 20:30:48 2016 -0700 |
| committer | David S. Miller <davem@davemloft.net> | Thu Nov 03 16:16:51 2016 -0400 |
| tree | 552c032ae3d6773f8130e154fa5223f6676537e5 | |
| parent | 93636d1f1f162ae89ae4f2a22a83bf4fd960724e [diff] |
ipv6: dccp: fix out of bound access in dccp_v6_err() dccp_v6_err() does not use pskb_may_pull() and might access garbage. We only need 4 bytes at the beginning of the DCCP header, like TCP, so the 8 bytes pulled in icmpv6_notify() are more than enough. Signed-off-by: Eric Dumazet <edumazet@google.com> Signed-off-by: David S. Miller <davem@davemloft.net>