Re: [PATCH] ipip: validate header length in ipip_tunnel_xmit

From: Willem de Bruijn
Date: Thu Jul 25 2019 - 14:06:47 EST


On Wed, Jul 24, 2019 at 11:09 PM Haishuang Yan
<yanhaishuang@xxxxxxxxxxxxxxxxxxxx> wrote:
>
> We need the same checks introduced by commit cb9f1b783850
> ("ip: validate header length on virtual device xmit") for
> ipip tunnel.

Fixes: cb9f1b783850b ("ip: validate header length on virtual device xmit")

> Signed-off-by: Haishuang Yan <yanhaishuang@xxxxxxxxxxxxxxxxxxxx>

Good catch. reg_vif_xmit in net/ipv4/ipmr.c probably also needs it.
All other ndo_start_xmit under net/ipv4 and net/ipv6 have this check
as of the above commit.