From: Eric Dumazet <eduma...@google.com> Date: Fri, 1 Jun 2018 09:23:02 -0700
> syzbot was able to trick af_packet again [1] :-( > Various commits tried to address the problem in the past, > but failed to take into account V3 header size. > > [1] ... > Fixes: 2b6867c2ce76 ("net/packet: fix overflow in check for priv area size") > Fixes: dc808110bb62 ("packet: handle too big packets for PACKET_V3") > Fixes: f6fb8f100b80 ("af-packet: TPACKET_V3 flexible buffer implementation.") > Signed-off-by: Eric Dumazet <eduma...@google.com> > Reported-by: syzbot <syzkal...@googlegroups.com> Applied and queued up for -stable, thanks Eric.