Thomas Graf c5098ebbd6 ila: Fix tailroom allocation of lwtstate
Tailroom is supposed to be of length sizeof(struct ila_lwt) but
sizeof(struct ila_params) is currently allocated.

This leads to the dst_cache and connected member of ila_lwt being
referenced out of bounds.

struct ila_lwt {
	struct ila_params p;
	struct dst_cache dst_cache;
	u32 connected : 1;
};

Fixes: 65d7ab8de582 ("net: Identifier Locator Addressing module")
Signed-off-by: Thomas Graf <tgraf@suug.ch>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2016-10-20 11:17:55 -04:00
..
2015-08-25 13:37:31 -07:00
2016-09-10 23:12:51 -07:00
2016-05-31 14:07:49 -07:00
2016-09-10 23:12:52 -07:00
2016-09-06 12:54:17 -07:00
2016-09-10 23:12:52 -07:00
2016-04-27 22:48:24 -04:00
2016-06-27 15:06:17 -04:00
2015-11-03 10:52:13 -05:00
2016-08-23 23:23:50 -07:00
2016-09-21 10:09:14 +02:00
2016-09-21 10:09:14 +02:00