projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5a05986) | patch
wireguard: device: do not generate ICMP for non-IP packets
authorJason A. Donenfeld <Jason@zx2c4.com>
Mon, 22 Feb 2021 16:25:47 +0000 (17:25 +0100)
committerJakub Kicinski <kuba@kernel.org>
Tue, 23 Feb 2021 23:59:34 +0000 (15:59 -0800)
commit99fff5264e7ab06f45b0ad60243475be0a8d0559
tree97c1827635df57d08f3fe2b7ff06caa62581eab5tree | snapshot
parent5a0598695634a6bb4126818902dd9140cd9df8b6commit | diff
wireguard: device: do not generate ICMP for non-IP packets

If skb->protocol doesn't match the actual skb->data header, it's
probably not a good idea to pass it off to icmp{,v6}_ndo_send, which is
expecting to reply to a valid IP packet. So this commit has that early
mismatch case jump to a later error label.

Fixes: e7096c131e51 ("net: WireGuard secure network tunnel")
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
drivers/net/wireguard/device.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git