From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Thu, 25 Jul 2013 08:46:46 +0000 (+0200)
Subject: netfilter: xt_TCPOPTSTRIP: fix possible off by one access
X-Git-Tag: v3.11-rc6~11^2~26^2~2
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a206bcb3b02025b23137f3228109d72e0f835c05;p=pandora-kernel.git

netfilter: xt_TCPOPTSTRIP: fix possible off by one access

Fix a possible off by one access since optlen()
touches opt[offset+1] unsafely when i == tcp_hdrlen(skb) - 1.

This patch replaces tcp_hdrlen() by the local variable tcp_hdrlen
that stores the TCP header length, to save some cycles.

Reported-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

Reading git-diff-tree failed