diff options
| author | Simon Arlott <simon@fire.lp0.eu> | 2010-05-03 10:19:33 +0000 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2010-05-03 13:27:00 -0700 |
| commit | ea8420e9f5dff7324607671f0b7ab7fbf726339d (patch) | |
| tree | dc7b905fd3a5b76f00705cd76d25e12cced842f5 /drivers/net/jazzsonic.c | |
| parent | 1183f3838c588545592c042c0ce15015661ce7f2 (diff) | |
ppp_generic: pull 2 bytes so that PPP_PROTO(skb) is valid
In ppp_input(), PPP_PROTO(skb) may refer to invalid data in the skb.
If this happens and (proto >= 0xc000 || proto == PPP_CCPFRAG) then
the packet is passed directly to pppd.
This occurs frequently when using PPPoE with an interface MTU
greater than 1500 because the skb is more likely to be non-linear.
The next 2 bytes need to be pulled in ppp_input(). The pull of 2
bytes in ppp_receive_frame() has been removed as it is no longer
required.
Signed-off-by: Simon Arlott <simon@fire.lp0.eu>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/net/jazzsonic.c')
0 files changed, 0 insertions, 0 deletions