Git Repo - linux.git/commit

author	Patrick McHardy <[email protected]>
	Tue, 9 Jan 2007 22:32:41 +0000 (14:32 -0800)
committer	David S. Miller <[email protected]>
	Tue, 9 Jan 2007 22:32:41 +0000 (14:32 -0800)
commit	f9f02cca25acf33e5853c6b3cbb0c7146312783f
tree	54bd83070a561f2c479196820e18cd097e9fcc40	tree \| snapshot
parent	656829e2d052b1da4a72aa2ac39ad733a78530ce	commit \| diff

[NETFILTER]: nf_conntrack_ipv6: fix crash when handling fragments

When IPv6 connection tracking splits up a defragmented packet into
its original fragments, the packets are taken from a list and are
passed to the network stack with skb->next still set. This causes
dev_hard_start_xmit to treat them as GSO fragments, resulting in
a use after free when connection tracking handles the next fragment.

Signed-off-by: Patrick McHardy <[email protected]>
Signed-off-by: David S. Miller <[email protected]>