diff options
| author | Jason A. Donenfeld <Jason@zx2c4.com> | 2021-02-22 17:25:47 +0100 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2021-02-23 15:59:34 -0800 |
| commit | 99fff5264e7ab06f45b0ad60243475be0a8d0559 (patch) | |
| tree | 97c1827635df57d08f3fe2b7ff06caa62581eab5 /crypto/essiv.c | |
| parent | 5a0598695634a6bb4126818902dd9140cd9df8b6 (diff) | |
wireguard: device: do not generate ICMP for non-IP packets
If skb->protocol doesn't match the actual skb->data header, it's
probably not a good idea to pass it off to icmp{,v6}_ndo_send, which is
expecting to reply to a valid IP packet. So this commit has that early
mismatch case jump to a later error label.
Fixes: e7096c131e51 ("net: WireGuard secure network tunnel")
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'crypto/essiv.c')
0 files changed, 0 insertions, 0 deletions