Re: [PATCH net] ipv6: sctp: clone options to avoid use after free
From: David Miller <davem@davemloft.net>
Date: 2015-12-12 01:19:21
Also in:
linux-sctp, lkml
From: Eric Dumazet <redacted> Date: Wed, 09 Dec 2015 07:25:06 -0800
From: Eric Dumazet <edumazet@google.com> SCTP is lacking proper np->opt cloning at accept() time. TCP and DCCP use ipv6_dup_options() helper, do the same in SCTP. We might later factorize this code in a common helper to avoid future mistakes. Reported-by: Dmitry Vyukov <dvyukov@google.com> Signed-off-by: Eric Dumazet <edumazet@google.com>
Applied and queued up for -stable, thanks.