diff options
| author |   Cong Wang <xiyou.wangcong@gmail.com> | 2019-07-01 20:40:24 -0700 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2019-07-03 13:26:12 -0700 |
| commit | 9d1bc24b52fb8c5d859f9a47084bf1179470e04c (patch) | |
| tree | ecc9fb47b451a8795412aa1937ebf8e16f26a3a4 /virt | |
| parent | Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf (diff) | |
| download | linux-dev-9d1bc24b52fb8c5d859f9a47084bf1179470e04c.tar.xz linux-dev-9d1bc24b52fb8c5d859f9a47084bf1179470e04c.zip | |
bonding: validate ip header before check IPPROTO_IGMP
bond_xmit_roundrobin() checks for IGMP packets but it parses
the IP header even before checking skb->protocol.
We should validate the IP header with pskb_may_pull() before
using iph->protocol.
Reported-and-tested-by: syzbot+e5be16aa39ad6e755391@syzkaller.appspotmail.com
Fixes: a2fd940f4cff ("bonding: fix broken multicast with round-robin mode")
Cc: Jay Vosburgh <j.vosburgh@gmail.com>
Cc: Veaceslav Falico <vfalico@gmail.com>
Cc: Andy Gospodarek <andy@greyhouse.net>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'virt')
0 files changed, 0 insertions, 0 deletions