iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
91c524708d
linux/net/l2tp
History
Jacob Wen 91c524708d l2tp: copy 4 more bytes to linear part if necessary 
The size of L2TPv2 header with all optional fields is 14 bytes.
l2tp_udp_recv_core only moves 10 bytes to the linear part of a
skb. This may lead to l2tp_recv_common read data outside of a skb.

This patch make sure that there is at least 14 bytes in the linear
part of a skb to meet the maximum need of l2tp_udp_recv_core and
l2tp_recv_common. The minimum size of both PPP HDLC-like frame and
Ethernet frame is larger than 14 bytes, so we are safe to do so.

Also remove L2TP_HDR_SIZE_NOSEQ, it is unused now.

Fixes: fd558d186d ("l2tp: Split pppol2tp patch into separate l2tp and ppp parts")
Suggested-by: Guillaume Nault <gnault@redhat.com>
Signed-off-by: Jacob Wen <jian.w.wen@oracle.com>
Acked-by: Guillaume Nault <gnault@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2019-01-31 08:58:46 -08:00
..
Kconfig
l2tp_core.c l2tp: copy 4 more bytes to linear part if necessary 2019-01-31 08:58:46 -08:00
l2tp_core.h l2tp: fix reading optional fields of L2TPv3 2019-01-30 21:44:17 -08:00
l2tp_debugfs.c l2tp: ignore L2TP_ATTR_MTU 2018-08-03 10:03:57 -07:00
l2tp_eth.c l2tp: fix unused function warning 2018-08-13 20:45:49 -07:00
l2tp_ip6.c l2tp: fix reading optional fields of L2TPv3 2019-01-30 21:44:17 -08:00
l2tp_ip.c l2tp: fix reading optional fields of L2TPv3 2019-01-30 21:44:17 -08:00
l2tp_netlink.c l2tp: split l2tp_session_get() 2018-08-11 12:13:49 -07:00
l2tp_ppp.c l2tp: fix unused function warning 2018-08-13 20:45:49 -07:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00