| commit | 403ccad066ecf63f83e25d3f701d6f39cc0a9f7d | [log] [tgz] |
|---|---|---|
| author | Pablo Neira Ayuso <pablo@netfilter.org> | Wed May 05 22:25:24 2021 +0200 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Wed May 19 10:13:08 2021 +0200 |
| tree | 37fccf637809eee748ebc4292efdc53330917972 | |
| parent | cee6592d444ac61acd55aad6386e29e13ba545df [diff] |
netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check
[ Upstream commit 5e024c325406470d1165a09c6feaf8ec897936be ]
Do not assume that the tcph->doff field is correct when parsing for TCP
options, skb_header_pointer() might fail to fetch these bits.
Fixes: 11eeef41d5f6 ("netfilter: passive OS fingerprint xtables match")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>