Commit 788d908f authored Aug 27, 2009 by Julien TINNES Committed by Linus Torvalds Aug 27, 2009

ipv4: make ip_append_data() handle NULL routing table



Add a check in ip_append_data() for NULL *rtp to prevent future bugs in
callers from being exploitable.

Signed-off-by: Julien Tinnes <julien@cr0.org>
Signed-off-by: Tavis Ormandy <taviso@sdf.lonestar.org>
Acked-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

parent 9886e836

net/ipv4/ip_output.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -813,6 +813,8 @@ int ip_append_data(struct sock *sk,
		inet->cork.addr = ipc->addr;
		}
		rt = *rtp;
		if (unlikely(!rt))
		return -EFAULT;
		/*
		* We steal reference to this route, caller should not release it
		*/