linux-stable/net
Johannes Berg 1bf3751ec9 ipv4: ip_check_defrag must not modify skb before unsharing
ip_check_defrag() might be called from af_packet within the
RX path where shared SKBs are used, so it must not modify
the input SKB before it has unshared it for defragmentation.
Use skb_copy_bits() to get the IP header and only pull in
everything later.

The same is true for the other caller in macvlan as it is
called from dev->rx_handler which can also get a shared SKB.

Reported-by: Eric Leblond <eric@regit.org>
Cc: stable@vger.kernel.org
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2012-12-10 13:51:44 -05:00
..
9p
802
8021q
appletalk
atm
ax25
batman-adv batman-adv: process broadcast packets in BLA earlier 2012-11-16 09:36:54 +01:00
bluetooth
bridge
caif
can can: bcm: initialize ifindex for timeouts without previous frame reception 2012-11-26 22:33:59 +01:00
ceph
core net: gro: fix possible panic in skb_gro_receive() 2012-12-07 14:39:29 -05:00
dcb
dccp
decnet
dns_resolver
dsa
ethernet
ieee802154
ipv4 ipv4: ip_check_defrag must not modify skb before unsharing 2012-12-10 13:51:44 -05:00
ipv6 ipv6: fix inet6_csk_update_pmtu() return value 2012-11-20 15:16:15 -05:00
ipx
irda irda: irttp: fix memory leak in irttp_open_tsap() error path 2012-11-28 11:25:29 -05:00
iucv
key
l2tp
lapb
llc
mac80211 mac80211: fix remain-on-channel (non-)cancelling 2012-11-26 14:41:40 -05:00
mac802154
netfilter netfilter: ipset: fix netiface set name overflow 2012-11-24 23:48:23 +01:00
netlabel
netlink
netrom
nfc NFC: Fix nfc_llcp_local chained list insertion 2012-11-20 00:09:25 +01:00
openvswitch
packet
phonet
rds
rfkill
rose
rxrpc
sched
sctp sctp: Error in calculation of RTTvar 2012-11-28 11:13:40 -05:00
sunrpc
tipc
unix
wanrouter
wimax
wireless
x25
xfrm
compat.c
Kconfig
Makefile
nonet.c
socket.c
sysctl_net.c