From: Willem de Bruijn <willemdebruijn.ker...@gmail.com> Date: Tue, 12 Jul 2016 18:18:55 -0400
> From: Willem de Bruijn <will...@google.com> > > Sockets can apply a filter to incoming packets to drop or trim them. > Fix two codepaths that call skb_pull/__skb_pull after sk_filter > without checking for packet length. > > Reading beyond skb->tail after trimming happens in more codepaths, but > safety of reading in the linear segment is based on minimum allocation > size (MAX_HEADER, GRO_MAX_HEAD, ..). Series applied and queued up for -stable, thanks.