Eric Dumazet 946bb6cacf bonding: prevent potential infinite loop in bond_header_parse() ...

[ Upstream commit b7405dcf73 ]

bond_header_parse() can loop if a stack of two bonding devices is setup,
because skb->dev always points to the hierarchy top.

Add new "const struct net_device *dev" parameter to
(struct header_ops)->parse() method to make sure the recursion
is bounded, and that the final leaf parse method is called.

Fixes: 950803f725 ("bonding: fix type confusion in bond_setup_by_slave()")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: Jiayuan Chen <jiayuan.chen@shopee.com>
Tested-by: Jiayuan Chen <jiayuan.chen@shopee.com>
Cc: Jay Vosburgh <jv@jvosburgh.net>
Cc: Andrew Lunn <andrew+netdev@lunn.ch>
Link: https://patch.msgid.link/20260315104152.1436867-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-03-25 11:08:53 +01:00

..

.kunitconfig

…

core-card.c

…

core-cdev.c

…

core-device.c

…

core-iso.c

…

core-topology.c

…

core-trace.c

…

core-transaction.c

…

core.h

…

device-attribute-test.c

…

init_ohci1394_dma.c

…

Kconfig

…

Makefile

…

net.c

bonding: prevent potential infinite loop in bond_header_parse()

2026-03-25 11:08:53 +01:00

nosy-user.h

…

nosy.c

firewire: nosy: Fix dma_free_coherent() size

2026-01-08 10:14:34 +01:00

nosy.h

…

ohci-serdes-test.c

…

ohci.c

…

ohci.h

…

packet-header-definitions.h

…

packet-serdes-test.c

…

phy-packet-definitions.h

…

sbp2.c

…

self-id-sequence-helper-test.c

…

uapi-test.c

…