]> git.baikalelectronics.ru Git - kernel.git/commit
ipsec: be careful of non existing mac headers
authorEric Dumazet <eric.dumazet@gmail.com>
Thu, 23 Feb 2012 10:55:02 +0000 (10:55 +0000)
committerDavid S. Miller <davem@davemloft.net>
Thu, 23 Feb 2012 21:50:45 +0000 (16:50 -0500)
commit059b60160dee2695aa992e0cb1fb48587ce17a21
tree26aab95243f23a5d0cff45ee0d6afd1608afe5df
parent6806db97f8eb4c1bd6aa194141893139bc9dd052
ipsec: be careful of non existing mac headers

Niccolo Belli reported ipsec crashes in case we handle a frame without
mac header (atm in his case)

Before copying mac header, better make sure it is present.

Bugzilla reference:  https://bugzilla.kernel.org/show_bug.cgi?id=42809

Reported-by: Niccolò Belli <darkbasic@linuxsystems.it>
Tested-by: Niccolò Belli <darkbasic@linuxsystems.it>
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/skbuff.h
net/ipv4/xfrm4_mode_beet.c
net/ipv4/xfrm4_mode_tunnel.c
net/ipv6/xfrm6_mode_beet.c
net/ipv6/xfrm6_mode_tunnel.c