David Ahern 4619bcf913 ipv6: Check attribute length for RTA_GATEWAY in multipath route
Commit referenced in the Fixes tag used nla_memcpy for RTA_GATEWAY as
does the current nla_get_in6_addr. nla_memcpy protects against accessing
memory greater than what is in the attribute, but there is no check
requiring the attribute to have an IPv6 address. Add it.

Fixes: 51ebd3181572 ("ipv6: add support of equal cost multipath (ECMP)")
Signed-off-by: David Ahern <dsahern@kernel.org>
Cc: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2021-12-31 14:31:59 +00:00
..
2021-06-11 14:48:50 +02:00
2019-07-27 14:23:48 -07:00
2021-10-13 09:41:37 -07:00
2021-12-02 12:21:11 +00:00
2021-10-13 09:41:37 -07:00
2021-08-05 13:27:50 +01:00
2021-06-11 14:48:50 +02:00
2021-11-03 11:18:46 +00:00
2020-12-16 11:01:04 -08:00