Re: [PATCH nf] netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Oct 25, 2024 at 08:02:29AM +0000, Eric Dumazet wrote:
> I got a syzbot report without a repro [1] crashing in nf_send_reset6()
> 
> I think the issue is that dev->hard_header_len is zero, and we attempt
> later to push an Ethernet header.
> 
> Use LL_MAX_HEADER, as other functions in net/ipv6/netfilter/nf_reject_ipv6.c.

Thanks, I will include this in the next PR with netfilter fixes.




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux