diff options
| author | Eric Dumazet <[email protected]> | 2017-04-26 17:15:40 -0700 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2017-04-28 16:05:22 -0400 |
| commit | 7162fb242cb8322beb558828fd26b33c3e9fc805 (patch) | |
| tree | 1d4240e28de77ffaf2180f17f3314b26a7bd1258 /tools/perf/scripts/python/call-graph-from-postgresql.py | |
| parent | 19cdead3e2ef8ed765c5d1ce48057ca9d97b5094 (diff) | |
tcp: do not underestimate skb->truesize in tcp_trim_head()
Andrey found a way to trigger the WARN_ON_ONCE(delta < len) in
skb_try_coalesce() using syzkaller and a filter attached to a TCP
socket over loopback interface.
I believe one issue with looped skbs is that tcp_trim_head() can end up
producing skb with under estimated truesize.
It hardly matters for normal conditions, since packets sent over
loopback are never truncated.
Bytes trimmed from skb->head should not change skb truesize, since
skb->head is not reallocated.
Signed-off-by: Eric Dumazet <[email protected]>
Reported-by: Andrey Konovalov <[email protected]>
Tested-by: Andrey Konovalov <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python/call-graph-from-postgresql.py')
0 files changed, 0 insertions, 0 deletions