From: David S. Miller <davem@davemloft.net>
Date: Wed, 13 Jul 2016 18:53:41 +0000 (-0700)
Subject: Merge branch 'sk_filter-trim-limit'
X-Git-Url: http://git.efficios.com/?a=commitdiff_plain;h=790e5ef59fead625858919da20b3db0242db0d8d;p=deliverable%2Flinux.git

Merge branch 'sk_filter-trim-limit'

Willem de Bruijn says:

====================
limit sk_filter trim to payload

Sockets can apply a filter to incoming packets to drop or trim them.
Fix two codepaths that call skb_pull/__skb_pull after sk_filter
without checking for packet length.

Reading beyond skb->tail after trimming happens in more codepaths, but
safety of reading in the linear segment is based on minimum allocation
size (MAX_HEADER, GRO_MAX_HEAD, ..).
====================

Signed-off-by: David S. Miller <davem@davemloft.net>
---

790e5ef59fead625858919da20b3db0242db0d8d