Memset the control block to zeroes before calling skb_segment
skb_segment casts part of skb->cb to some structure to determine
tunnel header length. Having remnants of packet structure in cb
results in wrong tunnel header length calculation and thus wrong
memory copies to random memory locations. This problem is with
newer kernels (4.x).
Reviewed: https:/ /review. opencontrail. org/31153 github. com/Juniper/ contrail- vrouter/ commit/ e431f08a615b395 6c29f962efe820c 18a42aac60
Committed: http://
Submitter: Zuul (<email address hidden>)
Branch: R2.22.x
commit e431f08a615b395 6c29f962efe820c 18a42aac60
Author: Anand H. Krishnan <email address hidden>
Date: Thu Apr 27 12:07:55 2017 +0530
Memset the control block to zeroes before calling skb_segment
skb_segment casts part of skb->cb to some structure to determine
tunnel header length. Having remnants of packet structure in cb
results in wrong tunnel header length calculation and thus wrong
memory copies to random memory locations. This problem is with
newer kernels (4.x).
Change-Id: Ifc2c7a4c5ea448 cd57df88e51bb82 a7f62c97cc6
Closes-Bug: #1685181