diff options
| author | Herbert Xu <herbert@gondor.apana.org.au> | 2007-08-21 00:06:37 -0700 |
|---|---|---|
| committer | David S. Miller <davem@sunset.davemloft.net> | 2007-08-21 20:58:13 -0700 |
| commit | d92a7db710c32db826a00ba9bc7a22e741d5041e (patch) | |
| tree | 800eeede84fea9ab9397b7a1a326629cf3c45bc8 /net/ipv6/raw.c | |
| parent | 39dad26c37fdb1382e4173172a2704fa278f7fd6 (diff) | |
| download | op-kernel-dev-d92a7db710c32db826a00ba9bc7a22e741d5041e.zip op-kernel-dev-d92a7db710c32db826a00ba9bc7a22e741d5041e.tar.gz | |
[SNAP]: Check packet length before reading
The snap_rcv code reads 5 bytes so we should make sure that
we have 5 bytes in the head before proceeding.
Based on diagnosis and fix by Evgeniy Polyakov, reported by
Alan J. Wylie.
Patch also kills the skb->sk assignment before kfree_skb
since it's redundant.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6/raw.c')
0 files changed, 0 insertions, 0 deletions
