Begin forwarded message:
Date: Wed, 19 Apr 2006 11:32:18 -0700 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: [Bugme-new] [Bug 6409] New: llc_rcv doesn't handle receives using nr_frags and frags[] http://bugzilla.kernel.org/show_bug.cgi?id=6409 Summary: llc_rcv doesn't handle receives using nr_frags and frags[] Kernel Version: 2.6.16 Status: NEW Severity: normal Owner: [EMAIL PROTECTED] Submitter: [EMAIL PROTECTED] Most recent kernel where this bug did not occur: Distribution: n/a Hardware Environment: i686 Software Environment: n/a Problem Description: after hitting a *very hard to repro* BUG in a distro kernel I did some code inspection that seems to show that llc_rcv does not handle receive packets using skb->data *and* skb_shinfo(skb)->frags[]/nr_frags Steps to reproduce: Apparently receiving some netware (802_2) traffic when using one of the PCI-Express e1000 adapters with packet splitting enabled. Even if the packet is not split a large frame will use skb->data and ->frags[] Analysis: llc_rcv does a skb_clone inside skb_share_check llc_fixup_skb skb_trim __skb_trim ___pskb_trim(x,x,0) <-- realloc set to 0 ___pskb_trim BUG on !realloc inside skb_cloned check I'll attach the trace from the vendor kernel, I believe the problem is still relevant to 2.6.16. ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is. - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
