]> git.baikalelectronics.ru Git - kernel.git/commit
batman-adv: fix skb->data assignment
authorAntonio Quartulli <ordex@autistici.org>
Thu, 14 Jun 2012 20:21:28 +0000 (22:21 +0200)
committerAntonio Quartulli <ordex@autistici.org>
Mon, 18 Jun 2012 16:00:56 +0000 (18:00 +0200)
commite0ec848fa9b4ad18ea2646df8baa929714c82cf6
treee6552d7b815c400999ff09e651777a875a3ab074
parent24758b6c43405b4440987389b4fabd30c490d834
batman-adv: fix skb->data assignment

skb_linearize(skb) possibly rearranges the skb internal data and then changes
the skb->data pointer value. For this reason any other pointer in the code that
was assigned skb->data before invoking skb_linearise(skb) must be re-assigned.

In the current tt_query message handling code this is not done and therefore, in
case of skb linearization, the pointer used to handle the packet header ends up
in pointing to poisoned memory. The packet is then dropped but the
translation-table mechanism is corrupted.

Signed-off-by: Antonio Quartulli <ordex@autistici.org>
Cc: <stable@vger.kernel.org>
Signed-off-by: Sven Eckelmann <sven@narfation.org>
net/batman-adv/routing.c