mirror of
https://github.com/torvalds/linux.git
synced 2024-11-17 01:22:07 +00:00
965801e1eb
In function lowpan_header_create(), we invoke the following code
construct:
struct ipv6hdr *hdr;
...
hdr = ipv6_hdr(skb);
...
if (...)
memcpy(hc06_ptr + 1, &hdr->flow_lbl[1], 2);
else
memcpy(hc06_ptr, &hdr, 4);
Where the else path of the condition, that is, non-compression
path, calls memcpy() with a pointer to struct ipv6hdr *hdr as
source, thus two levels of indirection. This cannot be correct,
and likely only one level of pointer was intended as source
buffer for memcpy() here.
Fixes:
|
||
|---|---|---|
| .. | ||
| 6lowpan.c | ||
| 6lowpan.h | ||
| af802154.h | ||
| af_ieee802154.c | ||
| dgram.c | ||
| ieee802154.h | ||
| Kconfig | ||
| Makefile | ||
| netlink.c | ||
| nl_policy.c | ||
| nl-mac.c | ||
| nl-phy.c | ||
| raw.c | ||
| wpan-class.c | ||