]> git.baikalelectronics.ru Git - kernel.git/commit
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
authorStefano Brivio <sbrivio@redhat.com>
Thu, 3 Jan 2019 20:43:34 +0000 (21:43 +0100)
committerDavid S. Miller <davem@davemloft.net>
Fri, 4 Jan 2019 21:06:07 +0000 (13:06 -0800)
commit3bdecaf4aff6c53b7b6dade2d87635f9ad17ab83
tree7fd864915e5771b489b207b32e76eeda2f1bed19
parentdd5c426e43799ce4fbd343d7903afd39ed79531d
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite

In commit 6305f06f1bde ("fou: Prevent unbounded recursion in GUE error
handler"), I didn't take care of the case where UDP-Lite is encapsulated
into UDP or UDP-Lite with GUE. From a syzbot report about a possibly
similar issue with GUE on IPv6, I just realised the same thing might
happen with a UDP-Lite inner payload.

Also skip exception handling for inner UDP-Lite protocol.

Fixes: 6305f06f1bde ("fou: Prevent unbounded recursion in GUE error handler")
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/fou.c