tree 9e8800bb8a3c9b6eb26fc8c224f19b77cb824072
parent 3de81b758853f0b29c61e246679d20b513c4cfec
author Sabrina Dubroca <sd@queasysnail.net> 1480693769 +0100
committer David S. Miller <davem@davemloft.net> 1480705631 -0500

geneve: avoid use-after-free of skb->data

geneve{,6}_build_skb can end up doing a pskb_expand_head(), which
makes the ip_hdr(skb) reference we stashed earlier stale. Since it's
only needed as an argument to ip_tunnel_ecn_encap(), move this
directly in the function call.

Fixes: 08399efc6319 ("geneve: ensure ECN info is handled properly in all tx/rx paths")
Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
Reviewed-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>