From mboxrd@z Thu Jan 1 00:00:00 1970 From: huw@codeweavers.com (Huw Davies) Date: Mon, 5 Jun 2017 18:20:28 +0100 Subject: [PATCH] net/ipv6: Fix CALIPSO causing GPF with datagram support In-Reply-To: References: <20170605154440.2434-1-richard_c_haines@btinternet.com> Message-ID: <20170605172028.GA2513@merlot.physics.ox.ac.uk> To: linux-security-module@vger.kernel.org List-Id: linux-security-module.vger.kernel.org On Mon, Jun 05, 2017 at 11:55:34AM -0400, Paul Moore wrote: > On Mon, Jun 5, 2017 at 11:44 AM, Richard Haines > wrote: > > When using CALIPSO with IPPROTO_UDP it is possible to trigger a GPF as the > > IP header may have moved. > > > > Also update the payload length after adding the CALIPSO option. > > > > Signed-off-by: Richard Haines > > --- > > net/ipv6/calipso.c | 6 +++++- > > 1 file changed, 5 insertions(+), 1 deletion(-) > > Acked-by: Paul Moore Signed-off-by: Huw Davies -- To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to majordomo at vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html