Received: by 10.192.165.156 with SMTP id m28csp999898imm; Thu, 19 Apr 2018 11:01:52 -0700 (PDT) X-Google-Smtp-Source: AIpwx4+hOR6e5raDX8tV6/1HmyFt73y3UmnynjqZItFdAcKigBiwgJKPqgkaLz1iCa3DtSLV8t3e X-Received: by 10.99.117.93 with SMTP id f29mr5739673pgn.401.1524160912769; Thu, 19 Apr 2018 11:01:52 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1524160912; cv=none; d=google.com; s=arc-20160816; b=GQrSYezfrLaDzhUSFXJT73BgunP84XDHeigO4D3df52m9Yx6bsrQ0cw0apxTDMhPLf ut0SJ4+0FFs84bARVwpuRiemYOeBiFPn+FqTqLmeWZd8IOu+GfYtbCsn+dMWkmk5i/m2 ufSAqASLZfbWEjZlHvPSl7YuYij8HLWM6Oc3J2/7U/RgqWjwWKIPtQ2530cna8QKNRpC m8z9es+ySYke7/lEEdG0pbBCTBqcZ1kdObIFfvrz/X6TgCKeq69EUuxij2B6lLk+EsHz V/Ui9DPdNf8nJ5+pWgtonHXXW8HaYEnsQAf1OfeDZVS+7LuicSQgMvLCx9U3ChKL5YoS NdGQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :references:in-reply-to:from:subject:cc:to:message-id:date :arc-authentication-results; bh=FYcgirSagk4ssM3++mh23Bczm19dLM98931oAsAw+68=; b=bQ3Fe+zQ/gK/zFo+My+KHejmPoEg/7kjzsLSEO7STx3pQffl27thD5Q5qJBCGIvLNA iVLIv61+XTY6k1lsdPk/ThDlZuIh/NWFdfK0eJcFPG5rNuVHfT5Eu08JP62JhAz/AB+O /+0KbApODRp8sGZcxavht6QkELmIrdvEOsjRPMrGyCh8cVvcngWMt2lI0v+82MaPQuEP fbJOPlPSsyhwtxs4Sp2PjwoJahfH2U3fGIAqGfwfqNq2yzVzp3IllhMd/NeEkRRKH454 Z9yIq3yJoiMzfgqr6ERAojoEeoJw2dD5QLoqyu8nMA1+NW5xxF3XvRd3eJMdcnK+6Usx HheA== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id b129si3248979pgc.387.2018.04.19.11.01.37; Thu, 19 Apr 2018 11:01:52 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753389AbeDSSAA (ORCPT + 99 others); Thu, 19 Apr 2018 14:00:00 -0400 Received: from shards.monkeyblade.net ([184.105.139.130]:33088 "EHLO shards.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752456AbeDSR75 (ORCPT ); Thu, 19 Apr 2018 13:59:57 -0400 Received: from localhost (67.110.78.66.ptr.us.xo.net [67.110.78.66]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (Client did not present a certificate) (Authenticated sender: davem-davemloft) by shards.monkeyblade.net (Postfix) with ESMTPSA id 87B2114523167; Thu, 19 Apr 2018 10:59:56 -0700 (PDT) Date: Thu, 19 Apr 2018 13:59:55 -0400 (EDT) Message-Id: <20180419.135955.1394035686984705882.davem@davemloft.net> To: doshir@vmware.com Cc: netdev@vger.kernel.org, pv-drivers@vmware.com, linux-kernel@vger.kernel.org Subject: Re: [PATCH net] vmxnet3: fix incorrect dereference when rxvlan is disabled From: David Miller In-Reply-To: <20180418194805.29119-1-doshir@vmware.com> References: <20180418194805.29119-1-doshir@vmware.com> X-Mailer: Mew version 6.7 on Emacs 25.3 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (shards.monkeyblade.net [149.20.54.216]); Thu, 19 Apr 2018 10:59:56 -0700 (PDT) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Ronak Doshi Date: Wed, 18 Apr 2018 12:48:04 -0700 > vmxnet3_get_hdr_len() is used to calculate the header length which in > turn is used to calculate the gso_size for skb. When rxvlan offload is > disabled, vlan tag is present in the header and the function references > ip header from sizeof(ethhdr) and leads to incorrect pointer reference. > > This patch fixes this issue by taking sizeof(vlan_ethhdr) into account > if vlan tag is present and correctly references the ip hdr. > > Signed-off-by: Ronak Doshi > Acked-by: Guolin Yang > Acked-by: Louis Luo Applied and queued up for -stable, thanks. Please provide an appropriate Fixes: tag next time.