[PATCH] net/ipv6: Fix CALIPSO causing GPF with datagram support

David Miller davem at davemloft.net
Tue Jun 6 19:19:19 UTC 2017


From: Richard Haines <richard_c_haines at btinternet.com>
Date: Mon,  5 Jun 2017 16:44:40 +0100

> When using CALIPSO with IPPROTO_UDP it is possible to trigger a GPF as the
> IP header may have moved.
> 
> Also update the payload length after adding the CALIPSO option.
> 
> Signed-off-by: Richard Haines <richard_c_haines at btinternet.com>

Applied and queued up for -stable, thank you Richard.
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html



More information about the Linux-security-module-archive mailing list