diff options
| author | Paolo Abeni <[email protected]> | 2021-01-12 17:25:23 +0000 |
|---|---|---|
| committer | Jakub Kicinski <[email protected]> | 2021-01-13 04:09:19 +0000 |
| commit | 20bc80b6f582ad1151c52ca09ab66b472768c9c8 (patch) | |
| tree | 0ba67f80da78e148b9b06d4d9d7bc5075788fc43 /net/lapb/lapb_out.c | |
| parent | Merge branch 'bnxt_en-bug-fixes' (diff) | |
| download | kernel-20bc80b6f582ad1151c52ca09ab66b472768c9c8.tar.gz kernel-20bc80b6f582ad1151c52ca09ab66b472768c9c8.zip | |
mptcp: more strict state checking for acks
Syzkaller found a way to trigger division by zero
in mptcp_subflow_cleanup_rbuf().
The current checks implemented into tcp_can_send_ack()
are too week, let's be more accurate.
Reported-by: Christoph Paasch <[email protected]>
Fixes: ea4ca586b16f ("mptcp: refine MPTCP-level ack scheduling")
Fixes: fd8976790a6c ("mptcp: be careful on MPTCP-level ack.")
Signed-off-by: Paolo Abeni <[email protected]>
Reviewed-by: Mat Martineau <[email protected]>
Signed-off-by: Jakub Kicinski <[email protected]>
Diffstat (limited to 'net/lapb/lapb_out.c')
0 files changed, 0 insertions, 0 deletions