You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Gerrit Renker d28934ad8a dccp: Fix panic caused by too early termination of retransmission mechanism ... Thanks is due to Wei Yongjun for the detailed analysis and description of this bug at http://marc.info/?l=dccp&m=121739364909199&w=2 The problem is that invalid packets received by a client in state REQUEST cause the retransmission timer for the DCCP-Request to be reset. This includes freeing the Request-skb ( in dccp_rcv_request_sent_state_process() ). As a consequence, * the arrival of further packets cause a double-free, triggering a panic(), * the connection then may hang, since further retransmissions are blocked. This patch changes the order of statements so that the retransmission timer is reset, and the pending Request freed, only if a valid Response has arrived (or the number of sysctl-retries has been exhausted). Further changes: ---------------- To be on the safe side, replaced __kfree_skb with kfree_skb so that if due to unexpected circumstances the sk_send_head is NULL the WARN_ON is used instead. Signed-off-by: Gerrit Renker <gerrit@erg.abdn.ac.uk> Signed-off-by: David S. Miller <davem@davemloft.net>		17 years ago
..
ccids	dccp ccid-3: Length of loss intervals	17 years ago
Kconfig	…
Makefile	…
ackvec.c	dccp: Fix sparse warnings	17 years ago
ackvec.h	…
ccid.c	[CCID]: More informative registration	17 years ago
ccid.h	[DCCP]: Introducing CCMPS	17 years ago
dccp.h	tcp: Fix kernel panic when calling tcp_v(4/6)_md5_do_lookup	17 years ago
diag.c	…
feat.c	dccp: return -EINVAL on invalid feature length	17 years ago
feat.h	…
input.c	dccp: Fix panic caused by too early termination of retransmission mechanism	17 years ago
ipv4.c	dccp: Fix incorrect length check for ICMPv4 packets	17 years ago
ipv6.c	dccp: Add check for truncated ICMPv6 DCCP error packets	17 years ago
ipv6.h	…
minisocks.c	tcp: Fix kernel panic when calling tcp_v(4/6)_md5_do_lookup	17 years ago
options.c	dccp: Upgrade NDP count from 3 to 6 bytes	17 years ago
output.c	dccp: Bug-Fix - AWL was never updated	17 years ago
probe.c	dccp: Fix sparse warnings	17 years ago
proto.c	dccp: change L/R must have at least one byte in the dccpsf_val field	17 years ago
sysctl.c	[NET]: Simple ctl_table to ctl_path conversions.	17 years ago
timer.c	dccp: Allow to distinguish original and retransmitted packets	17 years ago