Re: [PATCH net] ipv6: flowlabel: do not leave opt->tot_len with garbage

2017-10-21 Thread David Miller
From: Eric Dumazet Date: Sat, 21 Oct 2017 12:26:23 -0700 > From: Eric Dumazet > > When syzkaller team brought us a C repro for the crash [1] that > had been reported many times in the past, I finally could find > the root cause. > > If FlowLabel info is merged by fl6_merge_options(), we leave

[PATCH net] ipv6: flowlabel: do not leave opt->tot_len with garbage

2017-10-21 Thread Eric Dumazet
From: Eric Dumazet When syzkaller team brought us a C repro for the crash [1] that had been reported many times in the past, I finally could find the root cause. If FlowLabel info is merged by fl6_merge_options(), we leave part of the opt_space storage provided by udp/raw/l2tp with random value