Re: Kernel memory corruption in CIPSO labeled TCP packets processing.
From: Nazarov Sergey <hidden>
Date: 2019-01-31 13:20:46
Also in:
netdev, selinux
From: Nazarov Sergey <hidden>
Date: 2019-01-31 13:20:46
Also in:
netdev, selinux
31.01.2019, 05:10, "Paul Moore" [off-list ref]:
This isn't how the rest of the stack works, look at ip_local_deliver_finish() for one example. Perhaps the behavior you are proposing is correct, but please show me where in the various RFC specs it is defined so that I can better understand why it should work this way. -- paul moore www.paul-moore.com
Sorry, I was inattentive. ip_options_compile modifies srr option data, only if skb is NULL. My last message could be ignored.