Re: [Patch net] bonding: validate ip header before check IPPROTO_IGMP
From: David Miller <davem@davemloft.net>
Date: 2019-07-03 20:26:57
From: Cong Wang <redacted> Date: Mon, 1 Jul 2019 20:40:24 -0700
bond_xmit_roundrobin() checks for IGMP packets but it parses
the IP header even before checking skb->protocol.
We should validate the IP header with pskb_may_pull() before
using iph->protocol.
Reported-and-tested-by: syzbot+e5be16aa39ad6e755391@syzkaller.appspotmail.com
Fixes: a2fd940f4cff ("bonding: fix broken multicast with round-robin mode")
Cc: Jay Vosburgh <redacted>
Cc: Veaceslav Falico <redacted>
Cc: Andy Gospodarek <andy@greyhouse.net>
Signed-off-by: Cong Wang <redacted>Applied and queued up for -stable, thanks.