Re: potential mbuf corruption

[Iain Hibbert <plunky%rya-online.net@localhost>]

On Thu, 2 Dec 2010, Alexander Danilov wrote:

> net/netinet/tcp-input.c
>
> wrong check
>       if (m && tlen > MHLEN) {
> should be
>       if (m && (tlen + max_linkhdr) > MHLEN) {

you are correct and I have fixed it (v1.306), though I'm not sure there
are enough supported options to actually overrun an mbuf?

iain