On Thu, Nov 5, 2015 at 10:46 PM, David Miller <[email protected]> wrote: > From: Eric Dumazet <[email protected]> > Date: Thu, 05 Nov 2015 13:39:24 -0800 > >> From: Eric Dumazet <[email protected]> >> >> In commit e446f9dfe17b ("net: synack packets can be attached to request >> sockets"), I missed one remaining case of invalid skb->sk->sk_security >> access. >> >> Dmitry Vyukov got a KASan report pointing to it. >> >> Add selinux_skb_sk() helper that is responsible to get back to the >> listener if skb is attached to a request socket, instead of >> duplicating the logic. >> >> Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets instead >> of listener") >> Signed-off-by: Eric Dumazet <[email protected]> >> Reported-by: Dmitry Vyukov <[email protected]> >> Cc: Paul Moore <[email protected]> > > Looks good, applied, thanks Eric!
Fixed the issue for me. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
