diff options
author | Xin Long <lucien.xin@gmail.com> | 2014-03-03 12:18:36 (GMT) |
---|---|---|
committer | Jiri Slaby <jslaby@suse.cz> | 2014-03-13 22:19:40 (GMT) |
commit | 2a01e9e41e868b3bc290976b9c754a9f7e6672c4 (patch) | |
tree | 1181df80a70335508c7a32a2b4fb410ad85d5180 /net/sctp/sm_statefuns.c | |
parent | baef79a5c127beade866aef4e4e92c1547f41c86 (diff) | |
download | linux-fsl-qoriq-2a01e9e41e868b3bc290976b9c754a9f7e6672c4.tar.xz |
ip_tunnel:multicast process cause panic due to skb->_skb_refdst NULL pointer
[ Upstream commit 10ddceb22bab11dab10ba645c7df2e4a8e7a5db5 ]
when ip_tunnel process multicast packets, it may check if the packet is looped
back packet though 'rt_is_output_route(skb_rtable(skb))' in ip_tunnel_rcv(),
but before that , skb->_skb_refdst has been dropped in iptunnel_pull_header(),
so which leads to a panic.
fix the bug: https://bugzilla.kernel.org/show_bug.cgi?id=70681
Signed-off-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
Diffstat (limited to 'net/sctp/sm_statefuns.c')
0 files changed, 0 insertions, 0 deletions