diff options
| author | Vasily Averin <[email protected]> | 2021-10-22 13:28:37 +0300 |
|---|---|---|
| committer | Jakub Kicinski <[email protected]> | 2021-10-22 12:35:51 -0700 |
| commit | 7f678def99d29c520418607509bb19c7fc96a6db (patch) | |
| tree | 00dcfb73445680f1c0d78e803d5feacbc7996d6c /lib/test_fortify/write_overflow-strlcpy-src.c | |
| parent | 7fcb1c950e98e47918e86a5aa7b8fcc283ec6629 (diff) | |
skb_expand_head() adjust skb->truesize incorrectly
Christoph Paasch reports [1] about incorrect skb->truesize
after skb_expand_head() call in ip6_xmit.
This may happen because of two reasons:
- skb_set_owner_w() for newly cloned skb is called too early,
before pskb_expand_head() where truesize is adjusted for (!skb-sk) case.
- pskb_expand_head() does not adjust truesize in (skb->sk) case.
In this case sk->sk_wmem_alloc should be adjusted too.
[1] https://lkml.org/lkml/2021/8/20/1082
Fixes: f1260ff15a71 ("skbuff: introduce skb_expand_head()")
Fixes: 2d85a1b31dde ("ipv6: ip6_finish_output2: set sk into newly allocated nskb")
Reported-by: Christoph Paasch <[email protected]>
Signed-off-by: Vasily Averin <[email protected]>
Reviewed-by: Eric Dumazet <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Jakub Kicinski <[email protected]>
Diffstat (limited to 'lib/test_fortify/write_overflow-strlcpy-src.c')
0 files changed, 0 insertions, 0 deletions