From: Sabrina Dubroca <s...@queasysnail.net> Date: Wed, 19 Jul 2017 22:28:55 +0200
> In some cases, offset can overflow and can cause an infinite loop in > ip6_find_1stfragopt(). Make it unsigned int to prevent the overflow, and > cap it at IPV6_MAXPLEN, since packets larger than that should be invalid. > > This problem has been here since before the beginning of git history. > > Signed-off-by: Sabrina Dubroca <s...@queasysnail.net> > Acked-by: Hannes Frederic Sowa <han...@stressinduktion.org> Applied and queued up for -stable, thanks.