Michael Scott 35af729cae 6lowpan: iphc: reset mac_header after decompress to fix panic ... [ Upstream commit 03bc05e1a4 ] After decompression of 6lowpan socket data, an IPv6 header is inserted before the existing socket payload. After this, we reset the network_header value of the skb to account for the difference in payload size from prior to decompression + the addition of the IPv6 header. However, we fail to reset the mac_header value. Leaving the mac_header value untouched here, can cause a calculation error in net/packet/af_packet.c packet_rcv() function when an AF_PACKET socket is opened in SOCK_RAW mode for use on a 6lowpan interface. On line 2088, the data pointer is moved backward by the value returned from skb_mac_header(). If skb->data is adjusted so that it is before the skb->head pointer (which can happen when an old value of mac_header is left in place) the kernel generates a panic in net/core/skbuff.c line 1717. This panic can be generated by BLE 6lowpan interfaces (such as bt0) and 802.15.4 interfaces (such as lowpan0) as they both use the same 6lowpan sources for compression and decompression. Signed-off-by: Michael Scott <michael@opensourcefoundries.com> Acked-by: Alexander Aring <aring@mojatatu.com> Acked-by: Jukka Rissanen <jukka.rissanen@linux.intel.com> Signed-off-by: Marcel Holtmann <marcel@holtmann.org> Signed-off-by: Sasha Levin <alexander.levin@microsoft.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-10-10 08:52:04 +02:00
..
core.c	6lowpan: move shared settings to lowpan_netdev_setup	2015-10-08 14:25:34 +02:00
iphc.c	6lowpan: iphc: reset mac_header after decompress to fix panic	2018-10-10 08:52:04 +02:00
Kconfig
Makefile	6lowpan: add generic 6lowpan netdev private data	2015-08-11 22:05:36 +02:00
nhc_dest.c
nhc_fragment.c
nhc_hop.c
nhc_ipv6.c
nhc_mobility.c
nhc_routing.c
nhc_udp.c	6lowpan: move IPHC functionality defines	2015-10-21 00:49:25 +02:00
nhc.c	6lowpan: nhc: move iphc manipulation out of nhc	2015-10-21 00:49:25 +02:00
nhc.h	6lowpan: nhc: move iphc manipulation out of nhc	2015-10-21 00:49:25 +02:00