git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 412ed94) | patch
ip_gre: fix possible use after free
authorEric Dumazet <edumazet@google.com>
Thu, 20 Dec 2012 16:00:27 +0000 (16:00 +0000)
committerDavid S. Miller <davem@davemloft.net>
Fri, 21 Dec 2012 21:14:01 +0000 (13:14 -0800)
commitf7e75ba1772bc712af0070655ffd8b09906993b5
treeef32b318efe584f845f05eb7f65daca803abb6a1tree | snapshot
parent412ed94744d16806fbec3bd250fd94e71cde5a1fcommit | diff
ip_gre: fix possible use after free

Once skb_realloc_headroom() is called, tiph might point to freed memory.

Cache tiph->ttl value before the reallocation, to avoid unexpected
behavior.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Isaku Yamahata <yamahata@valinux.co.jp>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/ip_gre.c diff | blob | history
Pandora Kernel Repository