Alexey Kodanev
4ad19de877
net: tcp6: fix double call of tcp_v6_fill_cb()
...
tcp_v6_fill_cb() will be called twice if socket's state changes from
TCP_TIME_WAIT to TCP_LISTEN. That can result in control buffer data
corruption because in the second tcp_v6_fill_cb() call it's not copying
IP6CB(skb) anymore, but 'seq', 'end_seq', etc., so we can get weird and
unpredictable results. Performance loss of up to 1200% has been observed
in LTP/vxlan03 test.
This can be fixed by copying inet6_skb_parm to the beginning of 'cb'
only if xfrm6_policy_check() and tcp_v6_fill_cb() are going to be
called again.
Fixes: 2dc49d1680 ("tcp6: don't move IP6CB before xfrm6_policy_check()")
Signed-off-by: Alexey Kodanev <alexey.kodanev@oracle.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-03-29 13:36:05 -07:00
..
netfilter
netfilter: restore rule tracing via nfnetlink_log
2015-03-19 11:14:48 +01:00
addrconf.c
ipv6: addrconf: validate new MTU before applying it
2015-02-23 18:16:12 -05:00
addrconf_core.c
addrlabel.c
netlink: make nlmsg_end() and genlmsg_end() void
2015-01-18 01:03:45 -05:00
af_inet6.c
ah6.c
anycast.c
datagram.c
ip: fix error queue empty skb handling
2015-03-08 23:01:54 -04:00
esp6.c
exthdrs.c
exthdrs_core.c
exthdrs_offload.c
fib6_rules.c
ipv6: fix backtracking for throw routes
2015-03-20 12:57:23 -04:00
icmp.c
ipv6:icmp:remove unnecessary brackets
2015-01-14 16:35:49 -05:00
inet6_connection_sock.c
inet6_hashtables.c
ip6_checksum.c
ip6_fib.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-01-27 16:59:56 -08:00
ip6_flowlabel.c
ipv6: fix possible deadlock in ip6_fl_purge / ip6_fl_gc
2015-02-12 07:13:03 -08:00
ip6_gre.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-02-05 14:33:28 -08:00
ip6_icmp.c
ip6_input.c
ip6_offload.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2014-11-29 20:47:48 -08:00
ip6_offload.h
ip6_output.c
xps: must clear sender_cpu before forwarding
2015-03-11 23:51:18 -04:00
ip6_tunnel.c
ip6_tunnel: fix error code when tunnel exists
2015-03-17 15:01:18 -04:00
ip6_udp_tunnel.c
udp: Do not require sock in udp_tunnel_xmit_skb
2015-01-24 23:15:40 -08:00
ip6_vti.c
tunnels: advertise link netns via netlink
2015-01-19 14:32:03 -05:00
ip6mr.c
ipmr,ip6mr: call ip6mr_free_table() on failure path
2015-03-29 12:13:54 -07:00
ipcomp6.c
ipv6_sockglue.c
ipv6: tcp: fix race in IPV6_2292PKTOPTIONS
2015-01-26 00:44:08 -08:00
Kconfig
Makefile
mcast.c
mip6.c
ndisc.c
ipv6: Don't reduce hop limit for an interface
2015-03-25 11:41:08 -04:00
netfilter.c
output_core.c
ipv6: Make __ipv6_select_ident static
2015-02-09 14:21:03 -08:00
ping.c
net: ping: Return EAFNOSUPPORT when appropriate.
2015-03-04 15:46:51 -05:00
proc.c
protocol.c
raw.c
net: switch memcpy_fromiovec()/memcpy_fromiovecend() users to copy_from_iter()
2015-02-04 01:34:15 -05:00
reassembly.c
route.c
ipv6: fix ipv6_cow_metrics for non DST_HOST case
2015-02-14 20:26:16 -08:00
sit.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-02-05 14:33:28 -08:00
syncookies.c
sysctl_net_ipv6.c
tcp_ipv6.c
net: tcp6: fix double call of tcp_v6_fill_cb()
2015-03-29 13:36:05 -07:00
tcpv6_offload.c
tunnel6.c
udp.c
udpv6: Add lockless sendmsg() support
2015-02-02 19:28:04 -08:00
udp_impl.h
udp_offload.c
ipv6: call ipv6_proxy_select_ident instead of ipv6_select_ident in udp6_ufo_fragment
2015-03-20 12:56:11 -04:00
udplite.c
xfrm6_input.c
xfrm6_mode_beet.c
xfrm6_mode_ro.c
xfrm6_mode_transport.c
xfrm6_mode_tunnel.c
xfrm6_output.c
xfrm: Fix local error reporting crash with interfamily tunnels
2015-02-09 11:14:17 +01:00
xfrm6_policy.c
xfrm6: Fix a offset value for network header in _decode_session6
2015-02-06 07:00:32 +01:00
xfrm6_protocol.c
xfrm6_state.c
xfrm6_tunnel.c