From: Guillaume Nault <g.na...@alphalink.fr>
Date: Mon, 23 Apr 2018 16:15:14 +0200
> Check sockaddr_len before dereferencing sp->sa_protocol, to ensure that
> it actually points to valid data.
>
> Fixes: fd558d186df2 ("l2tp: Split pppol2tp patch into separate l2tp and ppp
> parts")
> Reported-by: syzbot+a70ac890b23b1bf29...@syzkaller.appspotmail.com
> Signed-off-by: Guillaume Nault <g.na...@alphalink.fr>
Applied and queued up for -stable.
I guess you can completely remove the "bad socket address" -EINVAL else
clause later in the function as a cleanup in net-next.
