| Message ID | 1564024076-13764-1-git-send-email-yanhaishuang@cmss.chinamobile.com |
|---|---|
| State | Superseded |
| Delegated to: | David Miller |
| Headers | show |
| Series | ipip: validate header length in ipip_tunnel_xmit | expand |
From: Haishuang Yan <yanhaishuang@cmss.chinamobile.com> Date: Thu, 25 Jul 2019 11:07:55 +0800 > We need the same checks introduced by commit cb9f1b783850 > ("ip: validate header length on virtual device xmit") for > ipip tunnel. > > Signed-off-by: Haishuang Yan <yanhaishuang@cmss.chinamobile.com> Applied and queued up for -stable.
diff --git a/net/ipv4/ipip.c b/net/ipv4/ipip.c index 43adfc1..2f01cf6 100644 --- a/net/ipv4/ipip.c +++ b/net/ipv4/ipip.c @@ -275,6 +275,9 @@ static netdev_tx_t ipip_tunnel_xmit(struct sk_buff *skb, const struct iphdr *tiph = &tunnel->parms.iph; u8 ipproto; + if (!pskb_inet_may_pull(skb)) + goto tx_error; + switch (skb->protocol) { case htons(ETH_P_IP): ipproto = IPPROTO_IPIP;
We need the same checks introduced by commit cb9f1b783850 ("ip: validate header length on virtual device xmit") for ipip tunnel. Signed-off-by: Haishuang Yan <yanhaishuang@cmss.chinamobile.com> --- net/ipv4/ipip.c | 3 +++ 1 file changed, 3 insertions(+)