| From foo@baz Wed May 28 21:03:54 PDT 2014 |
| From: Susant Sahani <susant@redhat.com> |
| Date: Sat, 10 May 2014 00:11:32 +0530 |
| Subject: ip6_tunnel: fix potential NULL pointer dereference |
| |
| From: Susant Sahani <susant@redhat.com> |
| |
| [ Upstream commit c8965932a2e3b70197ec02c6741c29460279e2a8 ] |
| |
| The function ip6_tnl_validate assumes that the rtnl |
| attribute IFLA_IPTUN_PROTO always be filled . If this |
| attribute is not filled by the userspace application |
| kernel get crashed with NULL pointer dereference. This |
| patch fixes the potential kernel crash when |
| IFLA_IPTUN_PROTO is missing . |
| |
| Signed-off-by: Susant Sahani <susant@redhat.com> |
| Acked-by: Thomas Graf <tgraf@suug.ch> |
| Signed-off-by: David S. Miller <davem@davemloft.net> |
| Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
| --- |
| net/ipv6/ip6_tunnel.c | 2 +- |
| 1 file changed, 1 insertion(+), 1 deletion(-) |
| |
| --- a/net/ipv6/ip6_tunnel.c |
| +++ b/net/ipv6/ip6_tunnel.c |
| @@ -1564,7 +1564,7 @@ static int ip6_tnl_validate(struct nlatt |
| { |
| u8 proto; |
| |
| - if (!data) |
| + if (!data || !data[IFLA_IPTUN_PROTO]) |
| return 0; |
| |
| proto = nla_get_u8(data[IFLA_IPTUN_PROTO]); |
