Messages in this thread Patch in this message | | | Date | Thu, 27 Aug 2009 15:26:58 +0200 | From | Julien TINNES <> | Subject | [PATCH] ipv4: make ip_append_data() handle NULL routing table |
| |
Add a check in ip_append_data() for NULL *rtp to prevent future bugs in callers from being exploitable.
Signed-off-by: Julien Tinnes <julien@cr0.org> Signed-off-by: Tavis Ormandy <taviso@sdf.lonestar.org> Acked-by: David S. Miller <davem@davemloft.net>
---
diff -r b3cbf0ceeb34 net/ipv4/ip_output.c --- a/net/ipv4/ip_output.c Mon Aug 24 14:48:29 2009 +0200 +++ b/net/ipv4/ip_output.c Thu Aug 27 15:20:36 2009 +0200 @@ -814,6 +814,8 @@ inet->cork.addr = ipc->addr; } rt = *rtp; + if (unlikely(!rt)) + return -EFAULT; /* * We steal reference to this route, caller should not release it */
| |