Re: net/icmp: null-ptr-deref in icmp6_send
From: David Ahern <hidden>
Date: 2016-11-23 03:10:51
Also in:
lkml
On 11/22/16 1:11 PM, Cong Wang wrote:
I have no idea what commit 5d41ce29e tried to fix, but we already use skb->dev a few lines before l3mdev_master_ifindex(), so I don't understand why skb->dev could be NULL, maybe just for vrf dev?
skb->dev can be null depending on when icmp6_send / icmpv6_send is called. Clearly I missed the ipv6_parse_hopopts -> icmpv6_param_prob path. I'll send a fix when I get back from PTO.