diff options
| author | Steffen Klassert <steffen.klassert@secunet.com> | 2018-02-19 07:44:07 +0100 |
|---|---|---|
| committer | Steffen Klassert <steffen.klassert@secunet.com> | 2018-02-20 08:38:57 +0100 |
| commit | 013cb81e89f8a70deef086ca29a923faf5585ab0 (patch) | |
| tree | a464f9903eef9b342c093857b655e0df297ef08c /net/bpf | |
| parent | 143a4454daaf0e80a2b9f37159a0d6d2b61e64ed (diff) | |
| download | linux-013cb81e89f8a70deef086ca29a923faf5585ab0.tar.gz linux-013cb81e89f8a70deef086ca29a923faf5585ab0.tar.bz2 linux-013cb81e89f8a70deef086ca29a923faf5585ab0.zip | |
xfrm: Fix infinite loop in xfrm_get_dst_nexthop with transport mode.
On transport mode we forget to fetch the child dst_entry
before we continue the while loop, this leads to an infinite
loop. Fix this by fetching the child dst_entry before we
continue the while loop.
Fixes: 0f6c480f23f4 ("xfrm: Move dst->path into struct xfrm_dst")
Reported-by: syzbot+7d03c810e50aaedef98a@syzkaller.appspotmail.com
Tested-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'net/bpf')
0 files changed, 0 insertions, 0 deletions