target/linux/ar71xx/patches-2.6.39/120-dsa-trailer-tag-validation-fix.patch

   1 --- a/net/dsa/tag_trailer.c
   2 +++ b/net/dsa/tag_trailer.c
   3 @@ -87,7 +87,7 @@ static int trailer_rcv(struct sk_buff *s
   4
   5         trailer = skb_tail_pointer(skb) - 4;
   6         if (trailer[0] != 0x80 || (trailer[1] & 0xf8) != 0x00 ||
   7 -           (trailer[3] & 0xef) != 0x00 || trailer[3] != 0x00)
   8 +           (trailer[2] & 0xef) != 0x00 || (trailer[3] & 0xfe) != 0x00)
   9                 goto out_drop;
  10
  11         source_port = trailer[1] & 7;