diff options
| author | Steffen Klassert <steffen.klassert@secunet.com> | 2015-10-23 07:31:23 +0200 |
|---|---|---|
| committer | Steffen Klassert <steffen.klassert@secunet.com> | 2015-10-23 07:31:23 +0200 |
| commit | 1a14f1e5550a341f76e5c8f596e9b5f8a886dfbc (patch) | |
| tree | 51d56a04d8d955f1eb661d239f4ec01f226b0ae5 /drivers | |
| parent | e33d4f13d21e9f604194ebc8730077ff39916c50 (diff) | |
| download | lwn-1a14f1e5550a341f76e5c8f596e9b5f8a886dfbc.tar.gz lwn-1a14f1e5550a341f76e5c8f596e9b5f8a886dfbc.zip | |
xfrm4: Fix header checks in _decode_session4.
We skip the header informations if the data pointer points
already behind the header in question for some protocols.
This is because we call pskb_may_pull with a negative value
converted to unsigened int from pskb_may_pull in this case.
Skipping the header informations can lead to incorrect policy
lookups, so fix it by a check of the data pointer position
before we call pskb_may_pull.
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'drivers')
0 files changed, 0 insertions, 0 deletions