Eric Dumazet 1aa9d1a0e7 ipv6: dccp: fix out of bound access in dccp_v6_err()
dccp_v6_err() does not use pskb_may_pull() and might access garbage.

We only need 4 bytes at the beginning of the DCCP header, like TCP,
so the 8 bytes pulled in icmpv6_notify() are more than enough.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2016-11-03 16:16:51 -04:00
..
2014-02-16 23:45:00 -05:00
2016-04-27 22:48:25 -04:00
2014-11-18 15:26:31 -05:00
2016-04-27 22:48:22 -04:00
2015-11-30 14:47:33 -05:00
2015-11-01 17:01:16 -05:00
2016-04-27 22:48:24 -04:00