On Sat, Jul 28, 2018 at 10:04 PM, Daniel Borkmann <dan...@iogearbox.net> wrote:
> The len > skb_headlen(skb) cannot be used as a maximum upper bound
> for the packet length since it does not have any relation to the full
> linear packet length when filtering is used from upper layers (e.g.
> in case of reuseport BPF programs) as by then skb->data, skb->len
> already got mangled through __skb_pull() and others.
>
> Fixes: 4e1ec56cdc59 ("bpf: add skb_load_bytes_relative helper")
> Signed-off-by: Daniel Borkmann <dan...@iogearbox.net>
> Acked-by: Martin KaFai Lau <ka...@fb.com>Great catch. Acked-by: Alexei Starovoitov <a...@kernel.org>
