Steffen Klassert 1a14f1e555 xfrm4: Fix header checks in _decode_session4.
We skip the header informations if the data pointer points
already behind the header in question for some protocols.
This is because we call pskb_may_pull with a negative value
converted to unsigened int from pskb_may_pull in this case.
Skipping the header informations can lead to incorrect policy
lookups, so fix it by a check of the data pointer position
before we call pskb_may_pull.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
2015-10-23 07:31:23 +02:00
..
2015-08-30 18:12:36 -04:00
2015-08-24 14:48:10 -07:00
2015-09-25 12:27:22 -07:00
2015-08-31 12:45:09 -07:00
2015-09-23 14:33:55 -07:00
2015-09-25 11:33:52 -07:00