Commit 4c2c574c authored by Alexander Aring's avatar Alexander Aring Committed by Greg Kroah-Hartman

net: sched: ife: check on metadata length


[ Upstream commit d57493d6 ]

This patch checks if sk buffer is available to dererence ife header. If
not then NULL will returned to signal an malformed ife packet. This
avoids to crashing the kernel from outside.
Signed-off-by: 's avatarAlexander Aring <aring@mojatatu.com>
Reviewed-by: 's avatarYotam Gigi <yotam.gi@gmail.com>
Acked-by: 's avatarJamal Hadi Salim <jhs@mojatatu.com>
Signed-off-by: 's avatarDavid S. Miller <davem@davemloft.net>
Signed-off-by: 's avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 388f3d97
......@@ -69,6 +69,9 @@ void *ife_decode(struct sk_buff *skb, u16 *metalen)
int total_pull;
u16 ifehdrln;
if (!pskb_may_pull(skb, skb->dev->hard_header_len + IFE_METAHDRLEN))
return NULL;
ifehdr = (struct ifeheadr *) (skb->data + skb->dev->hard_header_len);
ifehdrln = ntohs(ifehdr->metalen);
total_pull = skb->dev->hard_header_len + ifehdrln;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment