diff options
| author |   Eric Dumazet <edumazet@google.com> | 2019-02-15 13:36:20 -0800 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2019-02-17 15:46:58 -0800 |
| commit | 04c03114be82194d4a4858d41dba8e286ad1787c (patch) | |
| tree | fb25d7781f7faf8576f77965e3e586129da4b6aa /net/ipv4/tcp_ipv4.c | |
| parent | net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe() (diff) | |
| download | linux-dev-04c03114be82194d4a4858d41dba8e286ad1787c.tar.xz linux-dev-04c03114be82194d4a4858d41dba8e286ad1787c.zip | |
tcp: clear icsk_backoff in tcp_write_queue_purge()
soukjin bae reported a crash in tcp_v4_err() handling
ICMP_DEST_UNREACH after tcp_write_queue_head(sk)
returned a NULL pointer.
Current logic should have prevented this :
if (seq != tp->snd_una || !icsk->icsk_retransmits ||
!icsk->icsk_backoff || fastopen)
break;
Problem is the write queue might have been purged
and icsk_backoff has not been cleared.
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: soukjin bae <soukjin.bae@samsung.com>
Acked-by: Neal Cardwell <ncardwell@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv4/tcp_ipv4.c')
0 files changed, 0 insertions, 0 deletions