Re: [PATCH] ipv6: Prevent overrun when parsing v6 header options

From: Eric Dumazet
Date: Fri May 31 2019 - 10:53:53 EST




On 5/30/19 11:29 PM, Herbert Xu wrote:
> On Thu, May 30, 2019 at 10:17:04AM -0700, Eric Dumazet wrote:
>>
>> xfrm6_transport_output() seems buggy as well,
>> unless the skbs are linearized before entering these functions ?
>
> The headers that it's moving should be linearised. Is there
> something else I'm missing?
>

What do you mean by should ?

Are they currently already linearized before the function is called,
or is it missing and a bug needs to be fixed ?