bug on sending of fragmented IPv6 packet

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello All.

I found a bug in linux kernel 2.6.7.
On sending the fragmented IPv6 packet, it causes the kernel panic.

The patch to kernel2.6.7 is as follows.

--- linux-2.6.7/net/ipv6/ip6_output.c 2004-07-02 16:22:49.615797744 -0400
+++ linux-2.6.7/net/ipv6/ip6_output.c 2004-07-02 16:23:27.123095768 -0400
@@ -607,7 +607,7 @@
     frag->nh.ipv6h->payload_len = htons(frag->len - sizeof(struct ipv6hdr));
     ip6_copy_metadata(frag, skb);
    }
-   err = output(pskb);
+   err = output(&skb);
    if (err || !frag) {
     if (unlikely(skb != *pskb))
      skb = *pskb;

Regards,
Ueki Kohei

-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux