Re: [PATCH net] gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
From: patchwork-bot+netdevbpf
Date: Tue Jul 21 2026 - 18:20:19 EST
Hello:
This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:
On Fri, 10 Jul 2026 23:07:24 +0000 you wrote:
> gtp1u_send_echo_resp() ignores skb_pull_data()'s return value. Its
> caller gtp1u_udp_encap_recv() only guarantees 16 bytes (udphdr +
> gtp1_header), but the pull requests 20 (gtp1_header_long + udphdr). For
> a 16-19 byte echo request the pull fails and returns NULL without
> advancing skb->data; execution continues, and the following skb_push()
> plus the IP header pushed by iptunnel_xmit() move skb->data below
> skb->head, tripping skb_under_panic().
>
> [...]
Here is the summary with links:
- [net] gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
https://git.kernel.org/netdev/net/c/cd170f051dba
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html