On Fri, Dec 20, 2013 at 11:23:15AM +0100, Daniel Borkmann wrote: > In nft's nft_exthdr_eval() routine we process IPv6 extension header > through invoking ipv6_find_hdr(), but we call it with an uninitialized > offset variable that contains some stack value. In ipv6_find_hdr() > we then test if the value of offset != 0 and call skb_header_pointer() > on that offset in order to map struct ipv6hdr into it. Fix it up by > initializing offset to 0 as it was probably intended to be. good catch, applied. Thanks Daniel. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
