]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 33dbb54) | patch
ip_gre: fix possible use after free
authorEric Dumazet <edumazet@google.com>
Thu, 20 Dec 2012 16:00:27 +0000 (16:00 +0000)
committerDavid S. Miller <davem@davemloft.net>
Fri, 21 Dec 2012 21:14:01 +0000 (13:14 -0800)
commit926898ef5330372d3b77557f84b1561f72803a76
treeef32b318efe584f845f05eb7f65daca803abb6a1tree | snapshot
parent33dbb5477499aa662e5dcce9a77736654820ae43commit | diff
ip_gre: fix possible use after free

Once skb_realloc_headroom() is called, tiph might point to freed memory.

Cache tiph->ttl value before the reallocation, to avoid unexpected
behavior.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Isaku Yamahata <yamahata@valinux.co.jp>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/ip_gre.c diff | blob | history
Linux Kernel Source Tree.