| commit | a6d4518da371b0d21512ef0f641928d6f99ee70f | [log] [tgz] |
|---|---|---|
| author | Li RongQing <roy.qing.li@gmail.com> | Sat Oct 18 17:33:38 2014 +0800 |
| committer | David S. Miller <davem@davemloft.net> | Sat Oct 18 13:04:09 2014 -0400 |
| tree | d2cd98564a10f6cbf52492765d383f7959f4f001 | |
| parent | fc6fb41cd64fd810bcc69fe9776d2f500778f38f [diff] |
ipv6: fix a potential use after free in sit.c pskb_may_pull() maybe change skb->data and make iph pointer oboslete, fix it by geting ip header length directly. Fixes: ca15a078 (sit: generate icmpv6 error when receiving icmpv4 error) Cc: Oussama Ghorbel <ghorbel@pivasoftware.com> Signed-off-by: Li RongQing <roy.qing.li@gmail.com> Acked-by: Eric Dumazet <edumazet@google.com> Signed-off-by: David S. Miller <davem@davemloft.net>