diff options
| author | Pablo Neira Ayuso <[email protected]> | 2024-08-26 13:03:23 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <[email protected]> | 2024-08-27 16:11:56 +0000 |
| commit | 70c261d500951cf3ea0fcf32651aab9a65a91471 (patch) | |
| tree | 83e88e84dd109558d1d0bbfb8f95022df6a7dfcb /security/selinux/hooks.c | |
| parent | netfilter: nf_tables: restore IP sanity checks for netdev/egress (diff) | |
| download | kernel-70c261d500951cf3ea0fcf32651aab9a65a91471.tar.gz kernel-70c261d500951cf3ea0fcf32651aab9a65a91471.zip | |
netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
From netdev/egress, skb->len can include the ethernet header, therefore,
subtract network offset from skb->len when validating IPv6 packet length.
Fixes: 42df6e1d221d ("netfilter: Introduce egress hook")
Signed-off-by: Pablo Neira Ayuso <[email protected]>
Diffstat (limited to 'security/selinux/hooks.c')
0 files changed, 0 insertions, 0 deletions