10 Dec
2020
10 Dec
'20
2:32 p.m.
On Thu, Dec 10, 2020 at 3:26 PM Greg Kroah-Hartman gregkh@linuxfoundation.org wrote:
From: Eric Dumazet edumazet@google.com
IP_ECN_decapsulate() and IP6_ECN_decapsulate() assume IP header is already pulled.
geneve does not ensure this yet.
Fixing this generically in IP_ECN_decapsulate() and IP6_ECN_decapsulate() is not possible, since callers pass a pointer that might be freed by pskb_may_pull()
syzbot reported :
Note that we had to revert this patch, so you can either scratp this backport, or make sure to backport the revert.
Thanks !