On (01/19/17 11:37), David Miller wrote: > > I thought we had code which made sure that at least a minimal > link layer header was present in the SKB? > > Specifically I'm talking about the dev_validate_header() check. > That is supposed to protect us from these kinds of situations.
ah, but I run my pf_packet application as root, so I have capable(CAP_SYS_RAWIO), so I slip through the dev_validate_header() check. --Sowmini _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org https://lists.xen.org/xen-devel
