From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <stable-owner@vger.kernel.org>
Received: from mail.us.es ([193.147.175.20]:46084 "EHLO mail.us.es"
        rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP
        id S1751974AbdF2PA0 (ORCPT <rfc822;stable@vger.kernel.org>);
        Thu, 29 Jun 2017 11:00:26 -0400
Received: from antivirus1-rhel7.int (unknown [192.168.2.11])
        by mail.us.es (Postfix) with ESMTP id E3296523D6
        for <stable@vger.kernel.org>; Thu, 29 Jun 2017 17:00:14 +0200 (CEST)
Received: from antivirus1-rhel7.int (localhost [127.0.0.1])
        by antivirus1-rhel7.int (Postfix) with ESMTP id D4FE2CFDF7
        for <stable@vger.kernel.org>; Thu, 29 Jun 2017 17:00:14 +0200 (CEST)
Received: from antivirus1-rhel7.int (localhost [127.0.0.1])
        by antivirus1-rhel7.int (Postfix) with ESMTP id 64F82D1D98
        for <stable@vger.kernel.org>; Thu, 29 Jun 2017 17:00:12 +0200 (CEST)
Date: Thu, 29 Jun 2017 17:00:21 +0200
From: Pablo Neira Ayuso <pablo@netfilter.org>
To: Greg KH <greg@kroah.com>
Cc: stable@vger.kernel.org, Guillaume Nault <g.nault@alphalink.fr>,
        netfilter-devel@vger.kernel.org
Subject: [4.9.y,netfilter] please, cherry-pick 2638fd0f92d4
Message-ID: <20170629150021.GA5346@salvia>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Sender: stable-owner@vger.kernel.org
List-ID: <stable.vger.kernel.org>

Hi Greg,

Please, cherry-pick this commit:

commit 2638fd0f92d4397884fd991d8f4925cb3f081901
Author: Eric Dumazet <edumazet@google.com>
Date:   Mon Apr 3 10:55:11 2017 -0700

    netfilter: xt_TCPMSS: add more sanity tests on tcph->doff

People are experiencing crashes in production without this patch:

http://marc.info/?l=linux-netdev&m=149759912312430&w=2

[ Note for other stable maintainers: This patch applies cleanly here
  from 3.16 onwards. ]

Thanks!