diff options
| author | David S. Miller <davem@davemloft.net> | 2019-07-02 20:53:03 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2019-07-02 20:53:03 +0200 |
| commit | f2f1717592d4790790bdcc73dbbe4958d2d33198 (patch) | |
| tree | 0907ef038036f75e1914101b73be9891a42ac7d4 /net/rxrpc | |
| parent | r8152: fix the setting of detecting the linking change for runtime suspend (diff) | |
| parent | net: bridge: stp: don't cache eth dest pointer before skb pull (diff) | |
| download | linux-f2f1717592d4790790bdcc73dbbe4958d2d33198.tar.xz linux-f2f1717592d4790790bdcc73dbbe4958d2d33198.zip | |
Merge branch 'bridge-stale-ptrs'
Nikolay Aleksandrov says:
====================
net: bridge: fix possible stale skb pointers
In the bridge driver we have a couple of places which call pskb_may_pull
but we've cached skb pointers before that and use them after which can
lead to out-of-bounds/stale pointer use. I've had these in my "to fix"
list for some time and now we got a report (patch 01) so here they are.
Patches 02-04 are fixes based on code inspection. Also patch 01 was
tested by Martin Weinelt, Martin if you don't mind please add your
tested-by tag to it by replying with Tested-by: name <email>.
I've also briefly tested the set by trying to exercise those code paths.
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/rxrpc')
0 files changed, 0 insertions, 0 deletions