]> git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/commit
vxlan: check tun_info options_len properly
authorXin Long <lucien.xin@gmail.com>
Mon, 28 Oct 2019 17:24:32 +0000 (01:24 +0800)
committerDavid S. Miller <davem@davemloft.net>
Wed, 30 Oct 2019 00:39:26 +0000 (17:39 -0700)
commiteadf52cf1852196a1363044dcda22fa5d7f296f7
treea8905a9be405f6f988683a689ac62df2c96fc618
parent2eb8d6d2910cfe3dc67dc056f26f3dd9c63d47cd
vxlan: check tun_info options_len properly

This patch is to improve the tun_info options_len by dropping
the skb when TUNNEL_VXLAN_OPT is set but options_len is less
than vxlan_metadata. This can void a potential out-of-bounds
access on ip_tun_info.

Fixes: ee122c79d422 ("vxlan: Flow based tunneling")
Signed-off-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/vxlan.c