From: Jon Maloy <[email protected]> Date: Thu, 23 Feb 2017 11:10:31 -0500
> In the function tipc_rcv() we initialize a couple of stack variables > from the message header before that same header has been validated. > In rare cases when the arriving header is non-linar, the validation > function itself may linearize the buffer by calling skb_may_pull(), > while the wrongly initialized stack fields are not updated accordingly. > > We fix this in this commit. > > Reported-by: Matthew Wong <[email protected]> > Signed-off-by: Jon Maloy <[email protected]> Applied. ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ tipc-discussion mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/tipc-discussion
