Re: [PATCH net 0/2] limit sk_filter trim to payload

2016-07-13 Thread David Miller
From: Willem de Bruijn Date: Tue, 12 Jul 2016 18:18:55 -0400 > From: Willem de Bruijn > > Sockets can apply a filter to incoming packets to drop or trim them. > Fix two codepaths that call skb_pull/__skb_pull after sk_filter > without checking for packet length. > > Reading beyond skb->tail af

[PATCH net 0/2] limit sk_filter trim to payload

2016-07-12 Thread Willem de Bruijn
From: Willem de Bruijn Sockets can apply a filter to incoming packets to drop or trim them. Fix two codepaths that call skb_pull/__skb_pull after sk_filter without checking for packet length. Reading beyond skb->tail after trimming happens in more codepaths, but safety of reading in the linear s