On Mon, Nov 09, 2020 at 11:00:15AM +0800, Hangbin Liu wrote: > On Fri, Nov 06, 2020 at 06:15:44PM -0800, Martin KaFai Lau wrote: > > > - if (iph->nexthdr == 58 /* NEXTHDR_ICMP */) { > > Same here. Can this check be kept? > > Hi Martin, > > I'm OK to keep the checking, then what about _ipip6_set_tunnel()? It also > doesn't have the ICMP checking. It should. Otherwise, what is the point on testing "data + sizeof(*iph) > data_end" without checking anything from iph?