[IPV4] raw: Strengthen check on validity of iph->ihl
authorHerbert Xu <herbert@gondor.apana.org.au>
Sun, 6 Jan 2008 07:14:44 +0000 (23:14 -0800)
committerDavid S. Miller <davem@davemloft.net>
Wed, 9 Jan 2008 07:29:57 +0000 (23:29 -0800)
commitf844c74fe07321953e2dd227fe35280075f18f60
tree045fedb426c7990ad254520cb413010acbbe0ab8
parentcb77df3ec88f07c6141924dfe6fd96a2f541cc09
[IPV4] raw: Strengthen check on validity of iph->ihl

We currently check that iph->ihl is bounded by the real length and that
the real length is greater than the minimum IP header length.  However,
we did not check the caes where iph->ihl is less than the minimum IP
header length.

This breaks because some ip_fast_csum implementations assume that which
is quite reasonable.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/raw.c