summaryrefslogtreecommitdiffstats
path: root/drivers/sh
diff options
context:
space:
mode:
authorStefano Brivio <sbrivio@redhat.com>2019-01-03 21:43:35 +0100
committerDavid S. Miller <davem@davemloft.net>2019-01-04 13:06:07 -0800
commit44039e00171b0fe930c07ff7b43e6023eaf1ed31 (patch)
tree2b47c88227cbd7d560fb44002cf62b896d8631fd /drivers/sh
parentbc6e019b6ee65ff4ebf3ca272f774cf6c67db669 (diff)
downloadlinux-44039e00171b0fe930c07ff7b43e6023eaf1ed31.tar.bz2
fou6: Prevent unbounded recursion in GUE error handler
I forgot to deal with IPv6 in commit 11789039da53 ("fou: Prevent unbounded recursion in GUE error handler"). Now syzbot reported what might be the same type of issue, caused by gue6_err(), that is, handling exceptions for direct UDP encapsulation in GUE (UDP-in-UDP) leads to unbounded recursion in the GUE exception handler. As it probably doesn't make sense to set up GUE this way, and it's currently not even possible to configure this, skip exception handling for UDP (or UDP-Lite) packets encapsulated in UDP (or UDP-Lite) packets with GUE on IPv6. Reported-by: syzbot+4ad25edc7a33e4ab91e0@syzkaller.appspotmail.com Reported-by: Willem de Bruijn <willemdebruijn.kernel@gmail.com> Reported-by: Eric Dumazet <eric.dumazet@gmail.com> Fixes: b8a51b38e4d4 ("fou, fou6: ICMP error handlers for FoU and GUE") Signed-off-by: Stefano Brivio <sbrivio@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/sh')
0 files changed, 0 insertions, 0 deletions