diff options
| author | Steffen Klassert <steffen.klassert@secunet.com> | 2019-02-26 07:04:50 +0100 |
|---|---|---|
| committer | Steffen Klassert <steffen.klassert@secunet.com> | 2019-04-02 08:18:39 +0200 |
| commit | 8742dc86d0c7a9628117a989c11f04a9b6b898f3 (patch) | |
| tree | 728af98f0cc36df61525fc5958f188d825fc5bc6 /Documentation/networking | |
| parent | xfrm: Honor original L3 slave device in xfrmi policy lookup (diff) | |
| download | linux-8742dc86d0c7a9628117a989c11f04a9b6b898f3.tar.xz linux-8742dc86d0c7a9628117a989c11f04a9b6b898f3.zip | |
xfrm4: Fix uninitialized memory read in _decode_session4
We currently don't reload pointers pointing into skb header
after doing pskb_may_pull() in _decode_session4(). So in case
pskb_may_pull() changed the pointers, we read from random
memory. Fix this by putting all the needed infos on the
stack, so that we don't need to access the header pointers
after doing pskb_may_pull().
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'Documentation/networking')
0 files changed, 0 insertions, 0 deletions