Re: [PATCH net] dccp: fix out of bound access in dccp_v4_err()

2016-11-03 Thread David Miller
From: Eric Dumazet Date: Wed, 02 Nov 2016 19:00:40 -0700 > From: Eric Dumazet > > dccp_v4_err() does not use pskb_may_pull() and might access garbage. > > We only need 4 bytes at the beginning of the DCCP header, like TCP, > so the 8 bytes pulled in icmp_socket_deliver() are more than enough.

[PATCH net] dccp: fix out of bound access in dccp_v4_err()

2016-11-02 Thread Eric Dumazet
From: Eric Dumazet dccp_v4_err() does not use pskb_may_pull() and might access garbage. We only need 4 bytes at the beginning of the DCCP header, like TCP, so the 8 bytes pulled in icmp_socket_deliver() are more than enough. This patch might allow to process more ICMP messages, as some routers