On 26/05/2022 11:14, Fabio Estevam wrote:
Add a check for ip_len lesser than 28 and stop processing the packet in this case.Such a check covers the two reported bugs.
Ops, it is (ip->ip_len < 21) the condition that satisfies both cases. I will send a v3.