Files
linux/include/linux
Willem de Bruijn 9e8db59132 net: avoid false positives in untrusted gso validation
GSO packets with vnet_hdr must conform to a small set of gso_types.
The below commit uses flow dissection to drop packets that do not.

But it has false positives when the skb is not fully initialized.
Dissection needs skb->protocol and skb->network_header.

Infer skb->protocol from gso_type as the two must agree.
SKB_GSO_UDP can use both ipv4 and ipv6, so try both.

Exclude callers for which network header offset is not known.

Fixes: d5be7f632b ("net: validate untrusted gso packets without csum offload")
Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2019-02-21 14:08:13 -08:00
..
2019-01-25 15:32:28 -08:00
2019-01-24 11:11:45 -07:00
2018-12-28 12:11:52 -08:00
2019-01-04 13:13:48 -08:00
2019-01-04 13:13:48 -08:00
2019-01-07 16:38:26 +01:00
2018-12-21 11:50:02 -05:00
2019-01-11 18:05:40 -08:00
2018-12-22 12:15:29 +01:00