Re: [PATCH net v3] net: add recursion limit to GRO

2016-10-20 Thread David Miller
From: Sabrina Dubroca Date: Thu, 20 Oct 2016 15:58:02 +0200 > Currently, GRO can do unlimited recursion through the gro_receive > handlers. This was fixed for tunneling protocols by limiting tunnel GRO > to one level with encap_mark, but both VLAN and TEB still have this > problem. Thus, the ke

Re: [PATCH net v3] net: add recursion limit to GRO

2016-10-20 Thread Tom Herbert
On Thu, Oct 20, 2016 at 6:58 AM, Sabrina Dubroca wrote: > Currently, GRO can do unlimited recursion through the gro_receive > handlers. This was fixed for tunneling protocols by limiting tunnel GRO > to one level with encap_mark, but both VLAN and TEB still have this > problem. Thus, the kernel

[PATCH net v3] net: add recursion limit to GRO

2016-10-20 Thread Sabrina Dubroca
Currently, GRO can do unlimited recursion through the gro_receive handlers. This was fixed for tunneling protocols by limiting tunnel GRO to one level with encap_mark, but both VLAN and TEB still have this problem. Thus, the kernel is vulnerable to a stack overflow, if we receive a packet compose