commit | 403ccad066ecf63f83e25d3f701d6f39cc0a9f7d | [log] [tgz] |
---|---|---|
author | Pablo Neira Ayuso <pablo@netfilter.org> | Wed May 05 22:25:24 2021 +0200 |
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Wed May 19 10:13:08 2021 +0200 |
tree | 37fccf637809eee748ebc4292efdc53330917972 | |
parent | cee6592d444ac61acd55aad6386e29e13ba545df [diff] |
netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check [ Upstream commit 5e024c325406470d1165a09c6feaf8ec897936be ] Do not assume that the tcph->doff field is correct when parsing for TCP options, skb_header_pointer() might fail to fetch these bits. Fixes: 11eeef41d5f6 ("netfilter: passive OS fingerprint xtables match") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Sasha Levin <sashal@kernel.org>