Right. Does the lockup go away if you add a test for zero optlen in
ip_options.c, line 277. Pseudo-patch:
continue;
}
optlen = optptr[1];
- if (l<2 || optlen>l)
+ if (l<2 || optlen>l || !optlen)
{
pp_ptr = optptr;
break;
(or something to that effect..) Does that fix it?
Linus