From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.0 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_PASS,USER_AGENT_GIT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4A909C10F06 for ; Sat, 6 Apr 2019 15:17:04 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 212232087F for ; Sat, 6 Apr 2019 15:17:04 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726568AbfDFPRC (ORCPT ); Sat, 6 Apr 2019 11:17:02 -0400 Received: from mail-wr1-f52.google.com ([209.85.221.52]:42384 "EHLO mail-wr1-f52.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726436AbfDFPRC (ORCPT ); Sat, 6 Apr 2019 11:17:02 -0400 Received: by mail-wr1-f52.google.com with SMTP id g3so11296987wrx.9 for ; Sat, 06 Apr 2019 08:17:01 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=aGcJc92vQqG+L7Evxb37rOx+/nXLsK1etb+ckpkY+iI=; b=YpFmt9bb36NyYUFtrRlKXBXoOqC2cDIWmMn0ET1bf4WoNsCqKxsu9drRr4fhsvCbkp cEXsD3tpnpU2YqumuLQr044BPEf3HWe6/eDr6HGquOOPNjTolpTxnwBRUGbmnQ6miCiO 8w4bHhRgSnYJInZ+LgOoKuT1EyZFrSmh0TCbO3moOZQSN6klqKWm6seQ+5aiBi9YbXqP uElWS2CbaLTi6gnCupNryehk+A1rtoE7DmMnzl+PVy1Cl1kxC7Dd2Gdf0kFQhynbx1JW XnmQMZz/2Rss8aAPbzSSHDSIVQ0Hy6BdIu8qZqXsEHyNHT8a9pcUdCese1H8T6PSQRZ0 tXRw== X-Gm-Message-State: APjAAAU22n/frAbfV3eD5LKfqs+91TSQzWy+kHpccKU2l8d2MkyuZ/dd wcyOn/HeqkJBxgGzASEPPG+UKg== X-Google-Smtp-Source: APXvYqzMke1BbFaEGY8kvenHm0xIQ/gKCAAK9c/N1WVXgaG24Iy8GWcN+4q1bgOdQMxKVxLMDxluag== X-Received: by 2002:adf:f1ce:: with SMTP id z14mr12358372wro.152.1554563821321; Sat, 06 Apr 2019 08:17:01 -0700 (PDT) Received: from localhost.lan ([151.66.48.245]) by smtp.gmail.com with ESMTPSA id v190sm14339052wme.18.2019.04.06.08.16.57 (version=TLS1_3 cipher=AEAD-AES256-GCM-SHA384 bits=256/256); Sat, 06 Apr 2019 08:16:58 -0700 (PDT) From: Lorenzo Bianconi To: davem@davemloft.net Cc: netdev@vger.kernel.org, u9012063@gmail.com Subject: [PATCH net 0/2] fix possible use-after-free in erspan_v{4,6} Date: Sat, 6 Apr 2019 17:16:51 +0200 Message-Id: X-Mailer: git-send-email 2.20.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: netdev-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org Similar to what I did in commit bb9bd814ebf0, fix possible use-after-free in erspan_rcv and ip6erspan_rcv extracting tunnel metadata since the packet can be 'uncloned' running __iptunnel_pull_header Lorenzo Bianconi (2): net: ip_gre: fix possible use-after-free in erspan_rcv net: ip6_gre: fix possible use-after-free in ip6erspan_rcv net/ipv4/ip_gre.c | 15 ++++++++++----- net/ipv6/ip6_gre.c | 20 +++++++++++++------- 2 files changed, 23 insertions(+), 12 deletions(-) -- 2.20.1