From: Jesse Gross <jesse@nicira.com>
Date: Mon, 2 Apr 2012 21:26:27 +0000 (-0700)
Subject: openvswitch: Add length check when retrieving TCP flags.
X-Git-Tag: v3.4-rc7~4^2~13^2~2
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bf32fecdc1851ad9ca960f56771b798d17c26cf1;p=pandora-kernel.git

openvswitch: Add length check when retrieving TCP flags.

When collecting TCP flags we check that the IP header indicates that
a TCP header is present but not that the packet is actually long
enough to contain the header.  This adds a check to prevent reading
off the end of the packet.

In practice, this is only likely to result in reading of bad data and
not a crash due to the presence of struct skb_shared_info at the end
of the packet.

Signed-off-by: Jesse Gross <jesse@nicira.com>
---

Reading git-diff-tree failed