From: David S. Miller Date: Wed, 13 Jul 2016 18:53:41 +0000 (-0700) Subject: Merge branch 'sk_filter-trim-limit' X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=790e5ef59fead625858919da20b3db0242db0d8d;p=GitHub%2Fmoto-9609%2Fandroid_kernel_motorola_exynos9610.git Merge branch 'sk_filter-trim-limit' Willem de Bruijn says: ==================== limit sk_filter trim to payload Sockets can apply a filter to incoming packets to drop or trim them. Fix two codepaths that call skb_pull/__skb_pull after sk_filter without checking for packet length. Reading beyond skb->tail after trimming happens in more codepaths, but safety of reading in the linear segment is based on minimum allocation size (MAX_HEADER, GRO_MAX_HEAD, ..). ==================== Signed-off-by: David S. Miller --- 790e5ef59fead625858919da20b3db0242db0d8d