Re: [PATCH net] ip6: fix skb leak in ip6frag_expire_frag_queue()

2019-05-03 Thread Eric Dumazet
On 5/3/19 11:58 AM, Peter Oskolkov wrote: > On Fri, May 3, 2019 at 8:52 AM Eric Dumazet wrote: >> >> On Fri, May 3, 2019 at 11:33 AM Peter Oskolkov wrote: >>> >>> This skb_get was introduced by commit >>> 05c0b86b9696802fd0ce5676a92a63f1b455bdf3 >>> "ipv6: frags: rewrite ip6_expire_frag_queue

Re: [PATCH net] ip6: fix skb leak in ip6frag_expire_frag_queue()

2019-05-03 Thread Peter Oskolkov
On Fri, May 3, 2019 at 8:52 AM Eric Dumazet wrote: > > On Fri, May 3, 2019 at 11:33 AM Peter Oskolkov wrote: > > > > This skb_get was introduced by commit > > 05c0b86b9696802fd0ce5676a92a63f1b455bdf3 > > "ipv6: frags: rewrite ip6_expire_frag_queue()", and the rbtree patch > > is not in 4.4, wher

Re: [PATCH net] ip6: fix skb leak in ip6frag_expire_frag_queue()

2019-05-03 Thread Eric Dumazet
On Fri, May 3, 2019 at 11:33 AM Peter Oskolkov wrote: > > This skb_get was introduced by commit 05c0b86b9696802fd0ce5676a92a63f1b455bdf3 > "ipv6: frags: rewrite ip6_expire_frag_queue()", and the rbtree patch > is not in 4.4, where the bug is reported at. > Shouldn't the "Fixes" tag also reference

Re: [PATCH net] ip6: fix skb leak in ip6frag_expire_frag_queue()

2019-05-03 Thread Peter Oskolkov
On Fri, May 3, 2019 at 4:47 AM Eric Dumazet wrote: > > Since ip6frag_expire_frag_queue() now pulls the head skb > from frag queue, we should no longer use skb_get(), since > this leads to an skb leak. > > Stefan Bader initially reported a problem in 4.4.stable [1] caused > by the skb_get(), so thi

Re: [PATCH net] ip6: fix skb leak in ip6frag_expire_frag_queue()

2019-05-03 Thread Nicolas Dichtel
Le 03/05/2019 à 13:47, Eric Dumazet a écrit : > Since ip6frag_expire_frag_queue() now pulls the head skb > from frag queue, we should no longer use skb_get(), since > this leads to an skb leak. > > Stefan Bader initially reported a problem in 4.4.stable [1] caused > by the skb_get(), so this patch

Re: [PATCH net] ip6: fix skb leak in ip6frag_expire_frag_queue()

2019-05-03 Thread Eric Dumazet
On Fri, May 3, 2019 at 10:55 AM Nicolas Dichtel wrote: > > Le 03/05/2019 à 13:47, Eric Dumazet a écrit : > > Since ip6frag_expire_frag_queue() now pulls the head skb > > from frag queue, we should no longer use skb_get(), since > > this leads to an skb leak. > > > > Stefan Bader initially reported

[PATCH net] ip6: fix skb leak in ip6frag_expire_frag_queue()

2019-05-03 Thread Eric Dumazet
Since ip6frag_expire_frag_queue() now pulls the head skb from frag queue, we should no longer use skb_get(), since this leads to an skb leak. Stefan Bader initially reported a problem in 4.4.stable [1] caused by the skb_get(), so this patch should also fix this issue. 296583.091021] kernel BUG at