From: Eric Dumazet <[email protected]> Date: Thu, 05 Nov 2015 13:39:24 -0800
> From: Eric Dumazet <[email protected]> > > In commit e446f9dfe17b ("net: synack packets can be attached to request > sockets"), I missed one remaining case of invalid skb->sk->sk_security > access. > > Dmitry Vyukov got a KASan report pointing to it. > > Add selinux_skb_sk() helper that is responsible to get back to the > listener if skb is attached to a request socket, instead of > duplicating the logic. > > Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets instead > of listener") > Signed-off-by: Eric Dumazet <[email protected]> > Reported-by: Dmitry Vyukov <[email protected]> > Cc: Paul Moore <[email protected]> Looks good, applied, thanks Eric! -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
