Hannes Frederic Sowa b90cd7b9d0 inet: fix possible memory corruption with UDP_CORK and UFO ... [ This is a simplified -stable version of a set of upstream commits. ] This is a replacement patch only for stable which does fix the problems handled by the following two commits in -net: "ip_output: do skb ufo init for peeked non ufo skb as well" (e93b7d748b) "ip6_output: do skb ufo init for peeked non ufo skb as well" (c547dbf55d) Three frames are written on a corked udp socket for which the output netdevice has UFO enabled. If the first and third frame are smaller than the mtu and the second one is bigger, we enqueue the second frame with skb_append_datato_frags without initializing the gso fields. This leads to the third frame appended regulary and thus constructing an invalid skb. This fixes the problem by always using skb_append_datato_frags as soon as the first frag got enqueued to the skb without marking the packet as SKB_GSO_UDP. The problem with only two frames for ipv6 was fixed by "ipv6: udp packets following an UFO enqueued packet need also be handled by UFO" (2811ebac25). Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> Cc: Jiri Pirko <jiri@resnulli.us> Cc: Eric Dumazet <eric.dumazet@gmail.com> Cc: David Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2013-11-04 04:31:05 -08:00
..
acpi	ACPI: Try harder to resolve _ADR collisions for bridges	2013-08-29 09:47:29 -07:00
asm-generic	mm: Fix generic hugetlb pte check return type.	2013-10-13 16:08:33 -07:00
clocksource	ARM: late Exynos multiplatform changes	2013-05-07 11:28:42 -07:00
crypto
drm	Merge branch 'drm-radeon-sun-hainan' of git://people.freedesktop.org/~airlied/linux	2013-05-21 08:50:57 -07:00
dt-bindings
keys
linux	inet: fix possible memory corruption with UDP_CORK and UFO	2013-11-04 04:31:05 -08:00
math-emu
media	media: v4l2: added missing mutex.h include to v4l2-ctrls.h	2013-09-26 17:18:26 -07:00
memory
misc
net	net: fix cipso packet validation when !NETLABEL	2013-11-04 04:31:04 -08:00
pcmcia
ras
rdma
rxrpc
scsi	Merge branch 'postmerge' into for-linus	2013-05-10 07:54:01 -07:00
sound	ASoC: dapm: Treat DAI widgets like AIF widgets for power	2013-06-07 15:54:50 +01:00
target	iscsi-target: Fix iscsit_sequence_cmd reject handling for iser	2013-08-04 16:51:17 +08:00
trace	Fixed regressions (two stability regressions and a performance	2013-05-14 09:30:54 -07:00
uapi	drm/radeon/si: Add support for CP DMA to CS checker for compute v2	2013-10-01 09:17:47 -07:00
video	Merge branch 'fbdev-3.10-fixes' of git://gitorious.org/linux-omap-dss2/linux into linux-fbdev/for-3.10-fixes	2013-05-29 17:00:34 +08:00
xen	xenbus: delay xenbus frontend resume if xenstored is not running	2013-05-29 09:04:19 -04:00
Kbuild