diff options
| author | Changli Gao <xiaosuo@gmail.com> | 2010-06-02 07:32:42 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2010-06-02 07:32:42 -0700 |
| commit | fbc2e7d9cf49e0bf89b9e91fd60a06851a855c5d (patch) | |
| tree | a82f11f0ea06fd465393314d0f37772f715c6caf /init | |
| parent | edafe502404f3669d364b6e96d79b54067b634b4 (diff) | |
| download | linux-3.10-fbc2e7d9cf49e0bf89b9e91fd60a06851a855c5d.tar.gz linux-3.10-fbc2e7d9cf49e0bf89b9e91fd60a06851a855c5d.tar.bz2 linux-3.10-fbc2e7d9cf49e0bf89b9e91fd60a06851a855c5d.zip | |
cls_u32: use skb_header_pointer() to dereference data safely
use skb_header_pointer() to dereference data safely
the original skb->data dereference isn't safe, as there isn't any skb->len or
skb_is_nonlinear() check. skb_header_pointer() is used instead in this patch.
And when the skb isn't long enough, we terminate the function u32_classify()
immediately with -1.
Signed-off-by: Changli Gao <xiaosuo@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'init')
0 files changed, 0 insertions, 0 deletions