commit | 5f9c55c8066bcd93ac25234a02585701fe2e31df | [log] [tgz] |
---|---|---|
author | Jordy Zomer <jordy@pwning.systems> | Wed Nov 17 20:06:48 2021 +0100 |
committer | David S. Miller <davem@davemloft.net> | Thu Nov 18 11:42:06 2021 +0000 |
tree | 9cfd5b6e77e0bde6d275d7414fb0d321929b9cec | |
parent | 5d2ca2e12dfb2aff3388ca57b06f570fa6206ced [diff] |
ipv6: check return value of ipv6_skip_exthdr The offset value is used in pointer math on skb->data. Since ipv6_skip_exthdr may return -1 the pointer to uh and th may not point to the actual udp and tcp headers and potentially overwrite other stuff. This is why I think this should be checked. EDIT: added {}'s, thanks Kees Signed-off-by: Jordy Zomer <jordy@pwning.systems> Signed-off-by: David S. Miller <davem@davemloft.net>