From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Date: Fri, 11 Feb 2011 17:41:38 +1100 > I think we need to do some length verifications here because for > a malicious guest-generated packet the TCP header may not be present. Indeed, good catch. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
