gso: validate gso_type on ipip style tunnels

Browse source

Commit 121d57af30 ("gso: validate gso_type in GSO handlers") added
gso_type validation to existing gso_segment callback functions, to
filter out illegal and potentially dangerous SKB_GSO_DODGY packets.

Convert tunnels that now call inet_gso_segment and ipv6_gso_segment
directly to have their own callbacks and extend validation to these.

Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

...

This commit is contained in:

Willem de Bruijn 2019-02-20 10:52:12 -05:00 • committed by David S. Miller

parent 203ef5f1ff

commit 418e897e07

2 changed files with 40 additions and 4 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

11

net/ipv4/af_inet.c

View file

33

net/ipv6/ip6_offload.c

View file