Re: [PATCH net v2] vlan: consolidate VLAN parsing code and limit max parsing depth

2020-07-07 Thread David Miller
From: Toke Høiland-Jørgensen Date: Tue, 7 Jul 2020 13:03:25 +0200 > Toshiaki pointed out that we now have two very similar functions to extract > the L3 protocol number in the presence of VLAN tags. And Daniel pointed out > that the unbounded parsing loop makes it possible for maliciously crafte

[PATCH net v2] vlan: consolidate VLAN parsing code and limit max parsing depth

2020-07-07 Thread Toke Høiland-Jørgensen
Toshiaki pointed out that we now have two very similar functions to extract the L3 protocol number in the presence of VLAN tags. And Daniel pointed out that the unbounded parsing loop makes it possible for maliciously crafted packets to loop through potentially hundreds of tags. Fix both of these