diff options
| author | Eric Dumazet <edumazet@google.com> | 2016-11-02 20:30:48 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2016-11-03 16:16:51 -0400 |
| commit | 1aa9d1a0e7eefcc61696e147d123453fc0016005 (patch) | |
| tree | 552c032ae3d6773f8130e154fa5223f6676537e5 /net/dccp/feat.h | |
| parent | 93636d1f1f162ae89ae4f2a22a83bf4fd960724e (diff) | |
ipv6: dccp: fix out of bound access in dccp_v6_err()
dccp_v6_err() does not use pskb_may_pull() and might access garbage.
We only need 4 bytes at the beginning of the DCCP header, like TCP,
so the 8 bytes pulled in icmpv6_notify() are more than enough.
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/dccp/feat.h')
0 files changed, 0 insertions, 0 deletions