On Fri, 2017-02-03 at 18:20 -0500, Willem de Bruijn wrote: > From: Willem de Bruijn <[email protected]> > > When IFF_VNET_HDR is enabled, a virtio_net header must precede data. > Data length is verified to be greater than or equal to expected header > length tun->vnet_hdr_sz before copying. > > Read this value once and cache locally, as it can be updated between > the test and use (TOCTOU). > > Signed-off-by: Willem de Bruijn <[email protected]> > Reported-by: Dmitry Vyukov <[email protected]> > CC: Eric Dumazet <[email protected]> > ---
Acked-by: Eric Dumazet <[email protected]>
