From: Willem de Bruijn <willemdebruijn.ker...@gmail.com>
Date: Thu, 22 Dec 2016 18:19:16 -0500
> From: Willem de Bruijn <will...@google.com>
>
> Socket cmsg IP(V6)_RECVORIGDSTADDR checks that port range lies within
> the packet. For sockets that have transport headers pulled, transport
> offset can be negative. Use signed comparison to avoid overflow.
>
> Fixes: e6afc8ace6dd ("udp: remove headers from UDP packets before queueing")
> Reported-by: Nisar Jagabar <njaga...@cloudmark.com>
> Signed-off-by: Willem de Bruijn <will...@google.com>
Applied and queued up for -stable.
