Searched hist:"3 a1cebe7e05027a1c96f2fc1a8eddf5f19b78f42" (Results 1 – 1 of 1) sorted by relevance
| /openbmc/linux/net/ipv6/ |
| H A D | ip6_output.c | diff 3a1cebe7e05027a1c96f2fc1a8eddf5f19b78f42 Sun May 11 16:01:13 CDT 2014 Hannes Frederic Sowa <hannes@stressinduktion.org> ipv6: fix calculation of option len in ip6_append_data
tot_len does specify the size of struct ipv6_txoptions. We need opt_flen +
opt_nflen to calculate the overall length of additional ipv6 extensions.
I found this while auditing the ipv6 output path for a memory corruption
reported by Alexey Preobrazhensky while he fuzzed an instrumented
AddressSanitizer kernel with trinity. This may or may not be the cause
of the original bug.
Fixes: 4df98e76cde7c6 ("ipv6: pmtudisc setting not respected with UFO/CORK")
Reported-by: Alexey Preobrazhensky <preobr@google.com>
Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
|