| commit | 610438b74496b2986a9025f8e23c134cb638e338 | [log] [tgz] |
|---|---|---|
| author | Eric Dumazet <edumazet@google.com> | Wed Dec 11 08:10:05 2013 -0800 |
| committer | David S. Miller <davem@davemloft.net> | Wed Dec 11 16:10:14 2013 -0500 |
| tree | a04eec671093bb727ba8aacb8da6a289e6b77f45 | |
| parent | ce232ce01d61b184202bb185103d119820e1260c [diff] |
udp: ipv4: fix potential use after free in udp_v4_early_demux()
pskb_may_pull() can reallocate skb->head, we need to move the
initialization of iph and uh pointers after its call.
Fixes: 421b3885bf6d ("udp: ipv4: Add udp early demux")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Shawn Bohrer <sbohrer@rgmadvisors.com>
Signed-off-by: David S. Miller <davem@davemloft.net>