From: Willem de Bruijn <[email protected]> Date: Tue, 12 Jul 2016 18:18:55 -0400
> From: Willem de Bruijn <[email protected]> > > Sockets can apply a filter to incoming packets to drop or trim them. > Fix two codepaths that call skb_pull/__skb_pull after sk_filter > without checking for packet length. > > Reading beyond skb->tail after trimming happens in more codepaths, but > safety of reading in the linear segment is based on minimum allocation > size (MAX_HEADER, GRO_MAX_HEAD, ..). Series applied and queued up for -stable, thanks.
