diff options
| author | Jason A. Donenfeld <Jason@zx2c4.com> | 2021-02-22 17:25:47 +0100 |
|---|---|---|
| committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2022-07-07 13:26:43 +0200 |
| commit | 31190200d66e9dccde7fe8f299865e9cd792153e (patch) | |
| tree | a2dbed3e1592e10c570b6a52b25b7d48d9e60672 /drivers/net/wireguard/peer.c | |
| parent | 6fa20a6c099528e5502fe53eaca79034047bc852 (diff) | |
| download | wireguard-linux-trimmed-31190200d66e9dccde7fe8f299865e9cd792153e.tar.gz wireguard-linux-trimmed-31190200d66e9dccde7fe8f299865e9cd792153e.zip | |
wireguard: device: do not generate ICMP for non-IP packets
commit 05a909421f659b1bba4f26716ef2248f6c611a67 upstream.
If skb->protocol doesn't match the actual skb->data header, it's
probably not a good idea to pass it off to icmp{,v6}_ndo_send, which is
expecting to reply to a valid IP packet. So this commit has that early
mismatch case jump to a later error label.
Fixes: a8f1bc7bdea3 ("net: WireGuard secure network tunnel")
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Diffstat (limited to 'drivers/net/wireguard/peer.c')
0 files changed, 0 insertions, 0 deletions