ipsec: be careful of non existing mac headers
Niccolo Belli reported ipsec crashes in case we handle a frame without mac header (atm in his case) Before copying mac header, better make sure it is present. Bugzilla reference: https://bugzilla.kernel.org/show_bug.cgi?id=42809 Reported-by:Niccolò Belli <darkbasic@linuxsystems.it> Tested-by:
Niccolò Belli <darkbasic@linuxsystems.it> Signed-off-by:
Eric Dumazet <eric.dumazet@gmail.com> Signed-off-by:
David S. Miller <davem@davemloft.net>
Showing
- include/linux/skbuff.h 10 additions, 0 deletionsinclude/linux/skbuff.h
- net/ipv4/xfrm4_mode_beet.c 1 addition, 4 deletionsnet/ipv4/xfrm4_mode_beet.c
- net/ipv4/xfrm4_mode_tunnel.c 2 additions, 4 deletionsnet/ipv4/xfrm4_mode_tunnel.c
- net/ipv6/xfrm6_mode_beet.c 1 addition, 5 deletionsnet/ipv6/xfrm6_mode_beet.c
- net/ipv6/xfrm6_mode_tunnel.c 2 additions, 4 deletionsnet/ipv6/xfrm6_mode_tunnel.c
Loading
Please register or sign in to comment