]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commit
ipv6: Check ip6_find_1stfragopt() return value properly.
authorDavid S. Miller <davem@davemloft.net>
Thu, 18 May 2017 02:54:11 +0000 (22:54 -0400)
committerStefan Bader <stefan.bader@canonical.com>
Tue, 20 Jun 2017 08:50:57 +0000 (10:50 +0200)
commit154dffc7c3e765d0c941b79aab4f24851f0db876
treedd8a8eb445f512e41d8e0e67609a481f1fd0b28e
parente6bc0dda97d5b544b8cd88a144246eda94b68d0b
ipv6: Check ip6_find_1stfragopt() return value properly.

Do not use unsigned variables to see if it returns a negative
error or not.

Fixes: 2423496af35d ("ipv6: Prevent overrun when parsing v6 header options")
Reported-by: Julia Lawall <julia.lawall@lip6.fr>
Signed-off-by: David S. Miller <davem@davemloft.net>
CVE-2017-9074

(cherry picked from commit 7dd7eb9513bd02184d45f000ab69d78cb1fa1531)
Signed-off-by: Po-Hsu Lin <po-hsu.lin@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by-by: Stefan Bader <stefan.bader@canonical.com>
net/ipv6/ip6_offload.c
net/ipv6/ip6_output.c
net/ipv6/udp_offload.c