Re: [PATCH net] tcp: eliminate negative reordering in tcp_clean_rtx_queue

2017-05-16 Thread David Miller
From: Soheil Hassas Yeganeh Date: Mon, 15 May 2017 17:05:47 -0400 > From: Soheil Hassas Yeganeh > > tcp_ack() can call tcp_fragment() which may dededuct the > value tp->fackets_out when MSS changes. When prior_fackets > is larger than tp->fackets_out, tcp_clean_rtx_queue() can > invoke tcp_upda

[PATCH net] tcp: eliminate negative reordering in tcp_clean_rtx_queue

2017-05-15 Thread Soheil Hassas Yeganeh
From: Soheil Hassas Yeganeh tcp_ack() can call tcp_fragment() which may dededuct the value tp->fackets_out when MSS changes. When prior_fackets is larger than tp->fackets_out, tcp_clean_rtx_queue() can invoke tcp_update_reordering() with negative values. This results in absurd tp->reodering value