-
Tejaswi Tanikella authored
niph is not updated after pskb_expand_head changes the skb head. It still points to the freed data, which is then used to update tot_len and checksum. This could cause use-after-free poison crash. Update niph, if ip_route_me_harder does not fail. This only affects the interaction with REJECT targets and br_netfilter. Signed-off-by:
Tejaswi Tanikella <tejaswit@codeaurora.org> Signed-off-by:
Pablo Neira Ayuso <pablo@netfilter.org>
7400bb4b