Messages in this thread | | | From | Martin Lau <> | Subject | Re: [PATCH v2 net] ipv6: Fix dangling pointer when ipv6 fragment | Date | Mon, 1 Apr 2019 16:34:01 +0000 |
| |
On Sun, Mar 31, 2019 at 05:04:29PM +0800, hujunwei wrote: > From: Junwei Hu <hujunwei4@huawei.com> > > At the beginning of ip6_fragment func, the prevhdr pointer is > obtained in the ip6_find_1stfragopt func. > However, all the pointers pointing into skb header may change > when calling skb_checksum_help func with > skb->ip_summed = CHECKSUM_PARTIAL condition. > The prevhdr pointe will be dangling if it is not reloaded after > calling __skb_linearize func in skb_checksum_help func. > > Here, I add a variable, nexthdr_offset, to evaluate the offset, > which does not changes even after calling __skb_linearize func. Acked-by: Martin KaFai Lau <kafai@fb.com>
| |