vxlan: fix too large pskb_may_pull with remote checksum
vxlan_remcsum is called after iptunnel_pull_header and thus the skb has vxlan header already pulled. Don't include vxlan header again in the calculation. Signed-off-by: Jiri Benc <jbenc@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
5692d7ea41
commit
7d34fa75d3
|
@ -1143,7 +1143,7 @@ static int vxlan_igmp_leave(struct vxlan_dev *vxlan)
|
|||
static bool vxlan_remcsum(struct vxlanhdr *unparsed,
|
||||
struct sk_buff *skb, u32 vxflags)
|
||||
{
|
||||
size_t start, offset, plen;
|
||||
size_t start, offset;
|
||||
|
||||
if (!(unparsed->vx_flags & VXLAN_HF_RCO) || skb->remcsum_offload)
|
||||
goto out;
|
||||
|
@ -1151,9 +1151,7 @@ static bool vxlan_remcsum(struct vxlanhdr *unparsed,
|
|||
start = vxlan_rco_start(unparsed->vx_vni);
|
||||
offset = start + vxlan_rco_offset(unparsed->vx_vni);
|
||||
|
||||
plen = sizeof(struct vxlanhdr) + offset + sizeof(u16);
|
||||
|
||||
if (!pskb_may_pull(skb, plen))
|
||||
if (!pskb_may_pull(skb, offset + sizeof(u16)))
|
||||
return false;
|
||||
|
||||
skb_remcsum_process(skb, (void *)(vxlan_hdr(skb) + 1), start, offset,
|
||||
|
|
Loading…
Reference in New Issue