Re: [PATCH net] l2tp: copy 4 more bytes to linear part if necessary

2019-01-31 Thread David Miller
From: Jacob Wen Date: Thu, 31 Jan 2019 15:18:56 +0800 > The size of L2TPv2 header with all optional fields is 14 bytes. > l2tp_udp_recv_core only moves 10 bytes to the linear part of a > skb. This may lead to l2tp_recv_common read data outside of a skb. > > This patch make sure that there is at

Re: [PATCH net] l2tp: copy 4 more bytes to linear part if necessary

2019-01-31 Thread Guillaume Nault
On Thu, Jan 31, 2019 at 03:18:56PM +0800, Jacob Wen wrote: > The size of L2TPv2 header with all optional fields is 14 bytes. > l2tp_udp_recv_core only moves 10 bytes to the linear part of a > skb. This may lead to l2tp_recv_common read data outside of a skb. > Looks good, thanks for taking care of

[PATCH net] l2tp: copy 4 more bytes to linear part if necessary

2019-01-30 Thread Jacob Wen
The size of L2TPv2 header with all optional fields is 14 bytes. l2tp_udp_recv_core only moves 10 bytes to the linear part of a skb. This may lead to l2tp_recv_common read data outside of a skb. This patch make sure that there is at least 14 bytes in the linear part of a skb to meet the maximum nee