Crash in CIPSO_V4_TAG_LOCAL handling

From: Alan Cox <hidden>
Date: 2012-07-13 17:04:59

DaveM asked that this goes direct to the list so ...

Looking at some static code analyser output and the results seem valid on
this one:

ip_options_compile called with skb = NULL and an IPOPT_CIPSO option calls
into cipso_v4_validate, which if the option is CIPSO_V4_TAG_LOCAL then
dereferences skb->dev and explodes.

All the other cases appear to correctly avoid or check it versus NULL

Alan
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help