Re: [PATCH net-next] tcp: fix tcp_send_syn_data()

2017-10-20 Thread David Miller
From: Eric Dumazet Date: Wed, 18 Oct 2017 14:20:30 -0700 > From: Eric Dumazet > > syn_data was allocated by sk_stream_alloc_skb(), meaning > its destructor and _skb_refdst fields are mangled. > > We need to call tcp_skb_tsorted_anchor_cleanup() before > calling kfree_skb() or kernel crashes. >

Re: [PATCH net-next] tcp: fix tcp_send_syn_data()

2017-10-18 Thread Yuchung Cheng
On Wed, Oct 18, 2017 at 2:20 PM, Eric Dumazet wrote: > > From: Eric Dumazet > > syn_data was allocated by sk_stream_alloc_skb(), meaning > its destructor and _skb_refdst fields are mangled. > > We need to call tcp_skb_tsorted_anchor_cleanup() before > calling kfree_skb() or kernel crashes. > > Bu

[PATCH net-next] tcp: fix tcp_send_syn_data()

2017-10-18 Thread Eric Dumazet
From: Eric Dumazet syn_data was allocated by sk_stream_alloc_skb(), meaning its destructor and _skb_refdst fields are mangled. We need to call tcp_skb_tsorted_anchor_cleanup() before calling kfree_skb() or kernel crashes. Bug was reported by syzkaller bot. Fixes: e2080072ed2d ("tcp: new list f