git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1f8170b) | patch
[TCP] MTUprobe: fix potential sk_send_head corruption
authorIlpo Järvinen <ilpo.jarvinen@helsinki.fi>
Tue, 20 Nov 2007 07:24:09 +0000 (23:24 -0800)
committerDavid S. Miller <davem@davemloft.net>
Tue, 20 Nov 2007 07:24:09 +0000 (23:24 -0800)
commit6e42141009ff18297fe19d19296738b742f861db
tree6bbe19922e9b24d0ce4df6effc45abcf0aa2af51tree | snapshot
parent1f8170b0ecd8363847792b3b1f269e9d8e10391acommit | diff
[TCP] MTUprobe: fix potential sk_send_head corruption

When the abstraction functions got added, conversion here was
made incorrectly. As a result, the skb may end up pointing
to skb which got included to the probe skb and then was freed.
For it to trigger, however, skb_transmit must fail sending as
well.

Signed-off-by: Ilpo Järvinen <ilpo.jarvinen@helsinki.fi>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/tcp.h diff | blob | history
net/ipv4/tcp_output.c diff | blob | history
Full containers within linux kernel