diff options
author | Steffen Klassert <steffen.klassert@secunet.com> | 2013-10-30 10:16:28 (GMT) |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2013-12-08 15:29:15 (GMT) |
commit | d13252b415a1de2b91d240195afc7fd917c1f148 (patch) | |
tree | 536ebc9e869b572d994f5351f79449e309d505c9 /net/ipv6/ipv6_sockglue.c | |
parent | 83fc70f416f604cb71315de467accd0c07450c12 (diff) | |
download | linux-fsl-qoriq-d13252b415a1de2b91d240195afc7fd917c1f148.tar.xz |
xfrm: Fix null pointer dereference when decoding sessions
[ Upstream commit 84502b5ef9849a9694673b15c31bd3ac693010ae ]
On some codepaths the skb does not have a dst entry
when xfrm_decode_session() is called. So check for
a valid skb_dst() before dereferencing the device
interface index. We use 0 as the device index if
there is no valid skb_dst(), or at reverse decoding
we use skb_iif as device interface index.
Bug was introduced with git commit bafd4bd4dc
("xfrm: Decode sessions with output interface.").
Reported-by: Meelis Roos <mroos@linux.ee>
Tested-by: Meelis Roos <mroos@linux.ee>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'net/ipv6/ipv6_sockglue.c')
0 files changed, 0 insertions, 0 deletions