Files
linux/net/ipv6
JP Abgrall ef08cfe9ce netfilter: ipv6: fix crash caused by ipv6_find_hdr()
When calling:
    ipv6_find_hdr(skb, &thoff, -1, NULL)
on a fragmented packet, thoff would be left with a random
value causing callers to read random memory offsets with:
    skb_header_pointer(skb, thoff, ...)

Now we force ipv6_find_hdr() to return a failure in this case.
Calling:
  ipv6_find_hdr(skb, &thoff, -1, &fragoff)
will set fragoff as expected, and not return a failure.

Change-Id: Ib474e8a4267dd2b300feca325811330329684a88
Signed-off-by: JP Abgrall <jpa@google.com>
2013-07-01 13:40:36 -07:00
..
2013-02-15 15:10:37 -05:00
2013-03-26 12:27:18 -04:00
2013-03-26 12:27:19 -04:00
2013-05-31 16:26:49 -07:00
2013-03-26 12:27:19 -04:00
2013-03-17 14:35:13 -04:00
2013-05-11 16:26:38 -07:00
2013-05-11 16:26:38 -07:00
2013-05-11 16:26:38 -07:00
2013-05-11 16:26:38 -07:00