diff options
author | Cong Wang <xiyou.wangcong@gmail.com> | 2019-07-02 06:40:24 +0300 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2019-07-03 23:26:12 +0300 |
commit | 9d1bc24b52fb8c5d859f9a47084bf1179470e04c (patch) | |
tree | ecc9fb47b451a8795412aa1937ebf8e16f26a3a4 /net/xfrm | |
parent | c3ead2df9776ab22490d78a7f68a8ec58700e07f (diff) | |
download | linux-9d1bc24b52fb8c5d859f9a47084bf1179470e04c.tar.xz |
bonding: validate ip header before check IPPROTO_IGMP
bond_xmit_roundrobin() checks for IGMP packets but it parses
the IP header even before checking skb->protocol.
We should validate the IP header with pskb_may_pull() before
using iph->protocol.
Reported-and-tested-by: syzbot+e5be16aa39ad6e755391@syzkaller.appspotmail.com
Fixes: a2fd940f4cff ("bonding: fix broken multicast with round-robin mode")
Cc: Jay Vosburgh <j.vosburgh@gmail.com>
Cc: Veaceslav Falico <vfalico@gmail.com>
Cc: Andy Gospodarek <andy@greyhouse.net>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/xfrm')
0 files changed, 0 insertions, 0 deletions