From: Andrey Konovalov <andreyk...@google.com>
Date: Thu, 27 Apr 2017 13:49:57 +0200

> On Thu, Apr 27, 2017 at 2:15 AM, Eric Dumazet <eric.duma...@gmail.com> wrote:
>> From: Eric Dumazet <eduma...@google.com>
>>
>> Andrey found a way to trigger the WARN_ON_ONCE(delta < len) in
>> skb_try_coalesce() using syzkaller and a filter attached to a TCP
>> socket over loopback interface.
>>
>> I believe one issue with looped skbs is that tcp_trim_head() can end up
>> producing skb with under estimated truesize.
>>
>> It hardly matters for normal conditions, since packets sent over
>> loopback are never truncated.
>>
>> Bytes trimmed from skb->head should not change skb truesize, since
>> skb->head is not reallocated.
> 
> Hi Eric,
> 
> With all 3 of your patches applied to net-next I don't see the warning any 
> more.
> 
> Thanks!
> 
> Tested-by: Andrey Konovalov <andreyk...@google.com>

Applied and queued up for -stable, thanks Eric.

Reply via email to