diff options
| author |   Sabrina Dubroca <sd@queasysnail.net> | 2016-12-02 16:49:29 +0100 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2016-12-02 14:07:11 -0500 |
| commit | 5b01014759991887b1e450c9def01e58c02ab81b (patch) | |
| tree | 9e8800bb8a3c9b6eb26fc8c224f19b77cb824072 /net/lapb/lapb_in.c | |
| parent | tipc: check minimum bearer MTU (diff) | |
| download | linux-dev-5b01014759991887b1e450c9def01e58c02ab81b.tar.xz linux-dev-5b01014759991887b1e450c9def01e58c02ab81b.zip | |
geneve: avoid use-after-free of skb->data
geneve{,6}_build_skb can end up doing a pskb_expand_head(), which
makes the ip_hdr(skb) reference we stashed earlier stale. Since it's
only needed as an argument to ip_tunnel_ecn_encap(), move this
directly in the function call.
Fixes: 08399efc6319 ("geneve: ensure ECN info is handled properly in all tx/rx paths")
Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
Reviewed-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/lapb/lapb_in.c')
0 files changed, 0 insertions, 0 deletions