Please sign in to comment.
ipv4: keep skb->dst around in presence of IP options
Andrey Konovalov got crashes in __ip_options_echo() when a NULL skb->dst is accessed. ipv4_pktinfo_prepare() should not drop the dst if (evil) IP options are present. We could refine the test to the presence of ts_needtime or srr, but IP options are not often used, so let's be conservative. Thanks to syzkaller team for finding this bug. Fixes: d826eb1 ("ipv4: PKTINFO doesnt need dst reference") Signed-off-by: Eric Dumazet <firstname.lastname@example.org> Reported-by: Andrey Konovalov <email@example.com> Signed-off-by: David S. Miller <firstname.lastname@example.org>
- Loading branch information...