From mboxrd@z Thu Jan 1 00:00:00 1970 From: Eric Dumazet Subject: [PATCH net 0/2] ipv6: fix ip6_tnl_parse_tlv_enc_lim() issues Date: Mon, 23 Jan 2017 15:58:02 -0800 Message-ID: <20170123235804.29342-1-edumazet@google.com> Cc: netdev , Eric Dumazet , Willem de Bruijn , Alexei Starovoitov , Eric Dumazet To: "David S . Miller" Return-path: Received: from mail-pg0-f47.google.com ([74.125.83.47]:35502 "EHLO mail-pg0-f47.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751826AbdAWX6u (ORCPT ); Mon, 23 Jan 2017 18:58:50 -0500 Received: by mail-pg0-f47.google.com with SMTP id 194so48986585pgd.2 for ; Mon, 23 Jan 2017 15:58:07 -0800 (PST) Sender: netdev-owner@vger.kernel.org List-ID: First patch fixes ip6_tnl_parse_tlv_enc_lim() callers, bug added in linux-3.7 Second patch fixes ip6_tnl_parse_tlv_enc_lim() itself, bug predates linux-2.6.12 Based on a report from Dmitry Vyukov, thanks to KASAN. Eric Dumazet (2): ip6_tunnel: must reload ipv6h in ip6ip6_tnl_xmit() ipv6: fix ip6_tnl_parse_tlv_enc_lim() net/ipv6/ip6_gre.c | 3 +++ net/ipv6/ip6_tunnel.c | 34 +++++++++++++++++++++++----------- 2 files changed, 26 insertions(+), 11 deletions(-) -- 2.11.0.483.g087da7b7c-goog