From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <stable-owner@vger.kernel.org>
Received: from out1-smtp.messagingengine.com ([66.111.4.25]:46309 "EHLO
        out1-smtp.messagingengine.com" rhost-flags-OK-OK-OK-OK)
        by vger.kernel.org with ESMTP id S1751390AbdGAOLZ (ORCPT
        <rfc822;stable@vger.kernel.org>); Sat, 1 Jul 2017 10:11:25 -0400
Date: Sat, 1 Jul 2017 16:11:24 +0200
From: Greg KH <greg@kroah.com>
To: Pablo Neira Ayuso <pablo@netfilter.org>
Cc: stable@vger.kernel.org, Guillaume Nault <g.nault@alphalink.fr>,
        netfilter-devel@vger.kernel.org
Subject: Re: [4.9.y,netfilter] please, cherry-pick 2638fd0f92d4
Message-ID: <20170701141124.GB8136@kroah.com>
References: <20170629150021.GA5346@salvia>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20170629150021.GA5346@salvia>
Sender: stable-owner@vger.kernel.org
List-ID: <stable.vger.kernel.org>

On Thu, Jun 29, 2017 at 05:00:21PM +0200, Pablo Neira Ayuso wrote:
> Hi Greg,
> 
> Please, cherry-pick this commit:
> 
> commit 2638fd0f92d4397884fd991d8f4925cb3f081901
> Author: Eric Dumazet <edumazet@google.com>
> Date:   Mon Apr 3 10:55:11 2017 -0700
> 
>     netfilter: xt_TCPMSS: add more sanity tests on tcph->doff
> 
> People are experiencing crashes in production without this patch:
> 
> http://marc.info/?l=linux-netdev&m=149759912312430&w=2
> 
> [ Note for other stable maintainers: This patch applies cleanly here
>   from 3.16 onwards. ]

Now applied, thanks!

greg k-h