Re: [PATCH net] netlabel: out of bound access in cipso_v4_validate()

2017-02-04 Thread David Miller
From: Eric Dumazet Date: Fri, 03 Feb 2017 00:03:26 -0800 > From: Eric Dumazet > > syzkaller found another out of bound access in ip_options_compile(), > or more exactly in cipso_v4_validate() > > Fixes: 20e2a8648596 ("cipso: handle CIPSO options correctly when NetLabel is > disabled") > Fixes

Re: [PATCH net] netlabel: out of bound access in cipso_v4_validate()

2017-02-03 Thread Paul Moore
On Fri, Feb 3, 2017 at 3:03 AM, Eric Dumazet wrote: > From: Eric Dumazet > > syzkaller found another out of bound access in ip_options_compile(), > or more exactly in cipso_v4_validate() > > Fixes: 20e2a8648596 ("cipso: handle CIPSO options correctly when NetLabel is > disabled") > Fixes: 446fda

[PATCH net] netlabel: out of bound access in cipso_v4_validate()

2017-02-03 Thread Eric Dumazet
From: Eric Dumazet syzkaller found another out of bound access in ip_options_compile(), or more exactly in cipso_v4_validate() Fixes: 20e2a8648596 ("cipso: handle CIPSO options correctly when NetLabel is disabled") Fixes: 446fda4f2682 ("[NetLabel]: CIPSOv4 engine") Signed-off-by: Eric Dumazet