From: Eric Dumazet <[email protected]> Date: Thu, 18 Jan 2018 19:59:19 -0800
> From: Eric Dumazet <[email protected]> > > Without proper validation of DODGY packets, we might very well > feed qdisc_pkt_len_init() with invalid GSO packets. > > tcp_hdrlen() might access out-of-bound data, so let's use > skb_header_pointer() and proper checks. > > Whole story is described in commit d0c081b49137 ("flow_dissector: > properly cap thoff field") > > We have the goal of validating DODGY packets earlier in the stack, > so we might very well revert this fix in the future. > > Signed-off-by: Eric Dumazet <[email protected]> > Cc: Willem de Bruijn <[email protected]> > Cc: Jason Wang <[email protected]> > Reported-by: [email protected] Applied and queued up for -stable, thanks Eric.
