diff options
| author | Herbert Xu <herbert@gondor.apana.org.au> | 2008-02-05 03:15:50 -0800 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2008-02-05 03:15:50 -0800 |
| commit | 8cf229437fd826c32a44546899412b1eb3e1db6f (patch) | |
| tree | 3afef8d1a3839b1ede06c738a0847f06bb3da3dd /net/ipv4/icmp.c | |
| parent | 5d8c0aa9433b09387d9021358baef7939f9b32c4 (diff) | |
| download | op-kernel-dev-8cf229437fd826c32a44546899412b1eb3e1db6f.zip op-kernel-dev-8cf229437fd826c32a44546899412b1eb3e1db6f.tar.gz | |
[ICMP]: Restore pskb_pull calls in receive function
Somewhere along the development of my ICMP relookup patch the header
length check went AWOL on the non-IPsec path. This patch restores the
check.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv4/icmp.c')
| -rw-r--r-- | net/ipv4/icmp.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/net/ipv4/icmp.c b/net/ipv4/icmp.c index a7321a8..a13c074 100644 --- a/net/ipv4/icmp.c +++ b/net/ipv4/icmp.c @@ -1015,7 +1015,8 @@ int icmp_rcv(struct sk_buff *skb) goto error; } - __skb_pull(skb, sizeof(*icmph)); + if (!pskb_pull(skb, sizeof(*icmph))) + goto error; icmph = icmp_hdr(skb); |
