Files
linux/net/bridge
Eric Dumazet af67433576 bridge: fix a possible use after free
[ Upstream commit 22df13319d ]

br_multicast_ipv6_rcv() can call pskb_trim_rcsum() and therefore skb
head can be reallocated.

Cache icmp6_type field instead of dereferencing twice the struct
icmp6hdr pointer.

Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2011-10-03 11:40:56 -07:00
..
2011-10-03 11:40:50 -07:00
2011-04-04 17:22:29 -07:00
2011-03-10 13:45:57 -08:00