diff options
| author | Eric Dumazet <eric.dumazet@gmail.com> | 2011-08-23 19:57:05 +0000 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2011-08-24 17:49:24 -0700 |
| commit | 22df13319d1fec30b8f9bcaadc295829647109bb (patch) | |
| tree | b61441ea39ac3c525746bfe8aaab9b6b5f9c6c63 /REPORTING-BUGS | |
| parent | 4b275d7efa1c4412f0d572fcd7f78ed0919370b3 (diff) | |
bridge: fix a possible use after free
br_multicast_ipv6_rcv() can call pskb_trim_rcsum() and therefore skb
head can be reallocated.
Cache icmp6_type field instead of dereferencing twice the struct
icmp6hdr pointer.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'REPORTING-BUGS')
0 files changed, 0 insertions, 0 deletions