kernel/net/ipv4/icmp.c
.. .. @@ -755,6 +755,11 @@ 755 755 room = 576; 756 756 room -= sizeof(struct iphdr) + icmp_param.replyopts.opt.opt.optlen; 757 757 room -= sizeof(struct icmphdr); 758 + /* Guard against tiny mtu. We need to include at least one759 + * IP network header for this message to make any sense.760 + */761 + if (room <= (int)sizeof(struct iphdr))762 + goto ende;758 763 759 764 icmp_param.data_len = skb_in->len - icmp_param.offset; 760 765 if (icmp_param.data_len > room)