diff options
| author | Eric Dumazet <[email protected]> | 2019-02-15 21:36:20 +0000 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2019-02-17 23:46:58 +0000 |
| commit | 04c03114be82194d4a4858d41dba8e286ad1787c (patch) | |
| tree | fb25d7781f7faf8576f77965e3e586129da4b6aa /net/ipv4/tcp_ipv4.c | |
| parent | net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe() (diff) | |
| download | kernel-04c03114be82194d4a4858d41dba8e286ad1787c.tar.gz kernel-04c03114be82194d4a4858d41dba8e286ad1787c.zip | |
tcp: clear icsk_backoff in tcp_write_queue_purge()
soukjin bae reported a crash in tcp_v4_err() handling
ICMP_DEST_UNREACH after tcp_write_queue_head(sk)
returned a NULL pointer.
Current logic should have prevented this :
if (seq != tp->snd_una || !icsk->icsk_retransmits ||
!icsk->icsk_backoff || fastopen)
break;
Problem is the write queue might have been purged
and icsk_backoff has not been cleared.
Signed-off-by: Eric Dumazet <[email protected]>
Reported-by: soukjin bae <[email protected]>
Acked-by: Neal Cardwell <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'net/ipv4/tcp_ipv4.c')
0 files changed, 0 insertions, 0 deletions