On Wed, 20 Jan 2021 10:17:44 +0800 Xin Long wrote: > On Wed, Jan 20, 2021 at 12:57 AM Paolo Abeni <[email protected]> wrote: > > > > The commit dbd50f238dec ("net: move the hsize check to the else > > block in skb_segment") introduced a data corruption for devices > > supporting scatter-gather. > > > > The problem boils down to signed/unsigned comparison given > > unexpected results: if signed 'hsize' is negative, it will be > > considered greater than a positive 'len', which is unsigned. > > > > This commit addresses resorting to the old checks order, so that > > 'hsize' never has a negative value when compared with 'len'. > > > > v1 -> v2: > > - reorder hsize checks instead of explicit cast (Alex) > > > > Bisected-by: Matthieu Baerts <[email protected]> > > Fixes: dbd50f238dec ("net: move the hsize check to the else block in > > skb_segment") > > Signed-off-by: Paolo Abeni <[email protected]> > Reviewed-by: Xin Long <[email protected]>
I'm hitting this as well, so applied, thanks! > > --- > Reviewed-by: Xin Long <[email protected]> One review tag is enough ;) apparently patchwork doesn't know to dedup them :S
