]> www.infradead.org Git - users/jedix/linux-maple.git/commit
ipv6: Check ip6_find_1stfragopt() return value properly.
authorDavid S. Miller <davem@davemloft.net>
Thu, 18 May 2017 02:54:11 +0000 (22:54 -0400)
committerKirtikar Kashyap <kirtikar.kashyap@oracle.com>
Tue, 18 Jul 2017 19:24:04 +0000 (12:24 -0700)
commit4a5ed33a7c9cf967eba19fd0743e2ab8a9b25616
tree9b2a241a1aa87906a43ea73cf27f499d6b28e5ed
parent54c8318ae665539908d6ed4effaedc01a1d80e0f
ipv6: Check ip6_find_1stfragopt() return value properly.

Do not use unsigned variables to see if it returns a negative
error or not.

Fixes: 2423496af35d ("ipv6: Prevent overrun when parsing v6 header options")
Reported-by: Julia Lawall <julia.lawall@lip6.fr>
Signed-off-by: David S. Miller <davem@davemloft.net>
(cherry picked from commit 7dd7eb9513bd02184d45f000ab69d78cb1fa1531)

Orabug: 26175248
CVE-2017-9074

Signed-off-by: Kirtikar Kashyap <kirtikar.kashyap@oracle.com>
Reviewed-by: Qing Huang <qing.huang@oracle.com>
Reviewed-by: Jack Vogel <jack.vogel@oracle.com>
 Conflicts:
net/ipv6/ip6_offload.c
net/ipv6/ip6_offload.c
net/ipv6/ip6_output.c
net/ipv6/udp_offload.c