mirror of
https://github.com/hardkernel/linux.git
synced 2026-06-06 10:58:48 +09:00
207e72ba41
commitebe48d368eupstream. The maximum message size that can be send is bigger than the maximum site that skb_page_frag_refill can allocate. So it is possible to write beyond the allocated buffer. Fix this by doing a fallback to COW in that case. v2: Avoid get get_order() costs as suggested by Linus Torvalds. Bug: 227452856 Fixes:cac2661c53("esp4: Avoid skb_cow_data whenever possible") Fixes:03e2a30f6a("esp6: Avoid skb_cow_data whenever possible") Reported-by: valis <sec@valis.email> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Tadeusz Struk <tadeusz.struk@linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Change-Id: I2c7f97914138271e7788adfcebbd0b2b8b43cdcb Signed-off-by: Lee Jones <lee.jones@linaro.org>