subject:"\[PATCH 3.2 180\/185\] net\: flow_dissector\: fail on evil iph\->ihl"

[PATCH 3.2 180/185] net: flow_dissector: fail on evil iph->ihl

2013-12-28 Thread Ben Hutchings

3.2.54-rc1 review patch. If anyone has any objections, please let me know. -- From: Jason Wang commit 6f092343855a71e03b8d209815d8c45bf3a27fcd upstream. We don't validate iph->ihl which may lead a dead loop if we meet a IPIP skb whose iph->ihl is zero. Fix this by failing

[PATCH 3.2 180/185] net: flow_dissector: fail on evil iph-ihl

2013-12-28 Thread Ben Hutchings

3.2.54-rc1 review patch. If anyone has any objections, please let me know. -- From: Jason Wang jasow...@redhat.com commit 6f092343855a71e03b8d209815d8c45bf3a27fcd upstream. We don't validate iph-ihl which may lead a dead loop if we meet a IPIP skb whose iph-ihl is zero. Fix