[PATCH net 0/2] pfcp: fix two bugs in the receive path

[Haishuang Yan]

This series fixes two bugs in pfcp_encap_recv(), both introduced when
the receive path started filling in PFCP tunnel metadata.

Patch 1 fixes a metadata_dst leak when iptunnel_pull_header() fails
after tun_dst has been allocated.

Patch 2 makes sure the SEID is in the linear area before it is read, so
that a short packet with the S flag set cannot make the driver read
beyond the end of the packet data.

Haishuang Yan (2):
  pfcp: fix metadata_dst leak in pfcp_encap_recv()
  pfcp: make sure the SEID is linear before reading it

 drivers/net/pfcp.c | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

-- 
2.43.0