Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

netfilter: nft_reject_bridge: fix skb allocation size in nft_reject_br_send_v6_unreach

In order to allocate icmpv6 skb, sizeof(struct ipv6hdr) should be used.

Signed-off-by: Taehee Yoo <ap420073@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

authored by

Taehee Yoo and committed by
Pablo Neira Ayuso
0cafa392 31875d49

+1 -1
+1 -1
net/bridge/netfilter/nft_reject_bridge.c
··· 261 261 if (!reject6_br_csum_ok(oldskb, hook)) 262 262 return; 263 263 264 - nskb = alloc_skb(sizeof(struct iphdr) + sizeof(struct icmp6hdr) + 264 + nskb = alloc_skb(sizeof(struct ipv6hdr) + sizeof(struct icmp6hdr) + 265 265 LL_MAX_HEADER + len, GFP_ATOMIC); 266 266 if (!nskb) 267 267 return;