Re: [PATCH net] flow_dissector: properly cap thoff field

2018-01-18 Thread David Miller
From: Eric Dumazet Date: Wed, 17 Jan 2018 14:21:13 -0800 > From: Eric Dumazet > > syzbot reported yet another crash [1] that is caused by > insufficient validation of DODGY packets. > > Two bugs are happening here to trigger the crash. > > 1) Flow dissection leaves with incorrect thoff field.

Re: [PATCH net] flow_dissector: properly cap thoff field

2018-01-17 Thread Jason Wang
On 2018年01月18日 06:21, Eric Dumazet wrote: From: Eric Dumazet syzbot reported yet another crash [1] that is caused by insufficient validation of DODGY packets. Two bugs are happening here to trigger the crash. 1) Flow dissection leaves with incorrect thoff field. 2) skb_probe_transport_head

[PATCH net] flow_dissector: properly cap thoff field

2018-01-17 Thread Eric Dumazet
From: Eric Dumazet syzbot reported yet another crash [1] that is caused by insufficient validation of DODGY packets. Two bugs are happening here to trigger the crash. 1) Flow dissection leaves with incorrect thoff field. 2) skb_probe_transport_header() sets transport header to this invalid tho