From: Willem de Bruijn <willemdebruijn.ker...@gmail.com>
Date: Tue, 12 Jul 2016 18:18:55 -0400

> From: Willem de Bruijn <will...@google.com>
> 
> Sockets can apply a filter to incoming packets to drop or trim them.
> Fix two codepaths that call skb_pull/__skb_pull after sk_filter
> without checking for packet length.
> 
> Reading beyond skb->tail after trimming happens in more codepaths, but
> safety of reading in the linear segment is based on minimum allocation
> size (MAX_HEADER, GRO_MAX_HEAD, ..).

Series applied and queued up for -stable, thanks.

Reply via email to