diff options
| author | David S. Miller <[email protected]> | 2018-03-30 16:36:28 +0000 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2018-03-30 16:36:28 +0000 |
| commit | 52a9692a43b8cbca179d2dd02e714df6f1197932 (patch) | |
| tree | 67df9144cea6262fc7660a1c8cc0556df7bf0a8b /drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | |
| parent | atm: iphase: fix spelling mistake: "Receiverd" -> "Received" (diff) | |
| parent | vlan: Fix vlan insertion for packets without ethernet header (diff) | |
| download | kernel-52a9692a43b8cbca179d2dd02e714df6f1197932.tar.gz kernel-52a9692a43b8cbca179d2dd02e714df6f1197932.zip | |
Merge branch 'vlan-fix'
Toshiaki Makita says:
====================
Fix vlan tag handling for vlan packets without ethernet headers
Eric Dumazet reported syzbot found a new bug which leads to underflow of
size argument of memmove(), causing crash[1]. This can be triggered by tun
devices.
The underflow happened because skb_vlan_untag() did not expect vlan packets
without ethernet headers, and tun can produce such packets.
I also checked vlan_insert_inner_tag() and found a similar bug.
This series fixes these problems.
[1] https://marc.info/?l=linux-netdev&m=152221753920510&w=2
====================
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c')
0 files changed, 0 insertions, 0 deletions