hc
2024-05-16 8d2a02b24d66aa359e83eebc1ed3c0f85367a1cb
kernel/net/ipv4/icmp.c
....@@ -755,6 +755,11 @@
755755 room = 576;
756756 room -= sizeof(struct iphdr) + icmp_param.replyopts.opt.opt.optlen;
757757 room -= sizeof(struct icmphdr);
758
+ /* Guard against tiny mtu. We need to include at least one
759
+ * IP network header for this message to make any sense.
760
+ */
761
+ if (room <= (int)sizeof(struct iphdr))
762
+ goto ende;
758763
759764 icmp_param.data_len = skb_in->len - icmp_param.offset;
760765 if (icmp_param.data_len > room)