Re: [PATCH] net/ipv6: Fix CALIPSO causing GPF with datagram support
From: David Miller <davem@davemloft.net>
Date: 2017-06-05 16:00:23
Also in:
linux-security-module, selinux
From: David Miller <davem@davemloft.net>
Date: 2017-06-05 16:00:23
Also in:
linux-security-module, selinux
From: Paul Moore <paul@paul-moore.com> Date: Mon, 5 Jun 2017 11:55:34 -0400
On Mon, Jun 5, 2017 at 11:44 AM, Richard Haines [off-list ref] wrote:quoted
When using CALIPSO with IPPROTO_UDP it is possible to trigger a GPF as the IP header may have moved. Also update the payload length after adding the CALIPSO option. Signed-off-by: Richard Haines <redacted> --- net/ipv6/calipso.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-)Acked-by: Paul Moore <paul@paul-moore.com> Thanks Richard. DaveM, I assume you'll be pulling this into your tree?
Sure.