On Sat, Jul 28, 2018 at 10:04 PM, Daniel Borkmann <[email protected]> wrote: > The len > skb_headlen(skb) cannot be used as a maximum upper bound > for the packet length since it does not have any relation to the full > linear packet length when filtering is used from upper layers (e.g. > in case of reuseport BPF programs) as by then skb->data, skb->len > already got mangled through __skb_pull() and others. > > Fixes: 4e1ec56cdc59 ("bpf: add skb_load_bytes_relative helper") > Signed-off-by: Daniel Borkmann <[email protected]> > Acked-by: Martin KaFai Lau <[email protected]>
Great catch. Acked-by: Alexei Starovoitov <[email protected]>
