On Fri, 2013-11-01 at 15:01 +0800, Jason Wang wrote: > We don't validate iph->ihl which may lead a dead loop if we meet a IPIP > skb whose iph->ihl is zero. Fix this by failing immediately when iph->ihl > is evil (less than 5). > > This issue were introduced by commit ec5efe7946280d1e84603389a1030ccec0a767ae > (rps: support IPIP encapsulation). > > Cc: Eric Dumazet <eduma...@google.com> > Cc: Petr Matousek <pmato...@redhat.com> > Cc: Michael S. Tsirkin <m...@redhat.com> > Cc: Daniel Borkmann <dbork...@redhat.com> > Signed-off-by: Jason Wang <jasow...@redhat.com> > --- > This patch is needed for stable. > ---
Acked-by: Eric Dumazet <eduma...@google.com> Thanks Jason ! -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
