linux/net/appletalk
Doug Brown 8194423fda appletalk: Fix skb allocation size in loopback case
[ Upstream commit 39935dccb2 ]

If a DDP broadcast packet is sent out to a non-gateway target, it is
also looped back. There is a potential for the loopback device to have a
longer hardware header length than the original target route's device,
which can result in the skb not being created with enough room for the
loopback device's hardware header. This patch fixes the issue by
determining that a loopback will be necessary prior to allocating the
skb, and if so, ensuring the skb has enough room.

This was discovered while testing a new driver that creates a LocalTalk
network interface (LTALK_HLEN = 1). It caused an skb_under_panic.

Signed-off-by: Doug Brown <doug@schmorgal.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-04-07 12:47:02 +02:00
..
aarp.c appletalk: Fix potential NULL pointer dereference in unregister_snap_client 2019-12-17 20:38:59 +01:00
atalk_proc.c appletalk: Fix use-after-free in atalk_proc_exit 2019-04-20 09:15:07 +02:00
ddp.c appletalk: Fix skb allocation size in loopback case 2021-04-07 12:47:02 +02:00
dev.c License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
Makefile
sysctl_net_atalk.c appletalk: Fix use-after-free in atalk_proc_exit 2019-04-20 09:15:07 +02:00