From: Jason Wang <[email protected]> Date: Fri, 1 Nov 2013 15:01:10 +0800
> We don't validate iph->ihl which may lead a dead loop if we meet a IPIP > skb whose iph->ihl is zero. Fix this by failing immediately when iph->ihl > is evil (less than 5). > > This issue were introduced by commit ec5efe7946280d1e84603389a1030ccec0a767ae > (rps: support IPIP encapsulation). > > Cc: Eric Dumazet <[email protected]> > Cc: Petr Matousek <[email protected]> > Cc: Michael S. Tsirkin <[email protected]> > Cc: Daniel Borkmann <[email protected]> > Signed-off-by: Jason Wang <[email protected]> Applied and queued up for -stable, thanks Jason. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
