From: Shakya Sundar Das <shakya....@samsung.com> This patch will check segs for being NULL in tcp_gso_segment() before calling skb_shinfo(segs) from skb_is_gso(segs), otherwise kernel can run into a NULL-pointer dereference.
Signed-off-by: Shakya Sundar Das <shakya....@samsung.com> --- net/ipv4/tcp_offload.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/ipv4/tcp_offload.c b/net/ipv4/tcp_offload.c index bc68da3..93feefd 100644 --- a/net/ipv4/tcp_offload.c +++ b/net/ipv4/tcp_offload.c @@ -96,7 +96,7 @@ struct sk_buff *tcp_gso_segment(struct sk_buff *skb, skb->ooo_okay = 0; segs = skb_segment(skb, features); - if (IS_ERR(segs)) + if (IS_ERR_OR_NULL(segs)) goto out; /* Only first segment might have ooo_okay set */ -- 1.7.9.5