Upgrade to 4.4.50-rt62
[kvmfornfv.git] / kernel / net / ipv4 / cipso_ipv4.c
index bdb2a07..6cc3e1d 100644 (file)
@@ -1657,6 +1657,10 @@ int cipso_v4_validate(const struct sk_buff *skb, unsigned char **option)
                                goto validate_return_locked;
                        }
 
+               if (opt_iter + 1 == opt_len) {
+                       err_offset = opt_iter;
+                       goto validate_return_locked;
+               }
                tag_len = tag[1];
                if (tag_len > (opt_len - opt_iter)) {
                        err_offset = opt_iter + 1;