ipv6: frags: Fix bogus skb->sk in reassembled packets
authorHerbert Xu <herbert@gondor.apana.org.au>
Thu, 20 Dec 2018 13:20:10 +0000 (21:20 +0800)
committerDavid S. Miller <davem@davemloft.net>
Fri, 21 Dec 2018 00:31:36 +0000 (16:31 -0800)
commitd15f5ac8deea936d3adf629421a66a88b42b8a2f
tree6c89a22e3a2f67a4a708c3e46ca97cdec686bfe3
parent8fd1a4affbdafda592f80cd01bf7a382a5ff2fe8
ipv6: frags: Fix bogus skb->sk in reassembled packets

It was reported that IPsec would crash when it encounters an IPv6
reassembled packet because skb->sk is non-zero and not a valid
pointer.

This is because skb->sk is now a union with ip_defrag_offset.

This patch fixes this by resetting skb->sk when exiting from
the reassembly code.

Reported-by: Xiumei Mu <xmu@redhat.com>
Fixes: 219badfaade9 ("ipv6: frags: get rid of ip6frag_skb_cb/...")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/reassembly.c