| commit | 99131760a8851e6e5b2c9b24d0a68a3068923a08 | [log] [tgz] |
|---|---|---|
| author | Eric Dumazet <edumazet@google.com> | Wed Nov 02 20:30:48 2016 -0700 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Mon Nov 21 10:06:39 2016 +0100 |
| tree | d2591d6dab53ff75bcbac0b1511de4f6ac88054b | |
| parent | a2df29ed840f90e459a3f8ff029b216be3912731 [diff] |
ipv6: dccp: fix out of bound access in dccp_v6_err() [ Upstream commit 1aa9d1a0e7eefcc61696e147d123453fc0016005 ] dccp_v6_err() does not use pskb_may_pull() and might access garbage. We only need 4 bytes at the beginning of the DCCP header, like TCP, so the 8 bytes pulled in icmpv6_notify() are more than enough. Signed-off-by: Eric Dumazet <edumazet@google.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>