Re: [PATCH net] net: avoid false positives in untrusted gso validation

2019-02-21 Thread David Miller
From: Willem de Bruijn Date: Mon, 18 Feb 2019 23:37:12 -0500 > From: Willem de Bruijn > > GSO packets with vnet_hdr must conform to a small set of gso_types. > The below commit uses flow dissection to drop packets that do not. > > But it has false positives when the skb is not fully initialize

[PATCH net] net: avoid false positives in untrusted gso validation

2019-02-18 Thread Willem de Bruijn
From: Willem de Bruijn GSO packets with vnet_hdr must conform to a small set of gso_types. The below commit uses flow dissection to drop packets that do not. But it has false positives when the skb is not fully initialized. Dissection needs skb->protocol and skb->network_header. Infer skb->prot