On (01/19/17 11:37), David Miller wrote:
I thought we had code which made sure that at least a minimal
link layer header was present in the SKB?
Specifically I'm talking about the dev_validate_header() check.
That is supposed to protect us from these kinds of situations.
ah, but I run my pf_packet application as root, so I have
capable(CAP_SYS_RAWIO), so I slip through the dev_validate_header()
check.
--Sowmini
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel