{"push_id":1212562630,"size":1,"distinct_size":1,"ref":"refs/heads/6.0.1","head":"efe4cfc5a02f088b3262d9c2b7f0cf15f8780920","before":"8e3976beeada047362497f8f873d2781b6c8b92c","commits":[{"sha":"efe4cfc5a02f088b3262d9c2b7f0cf15f8780920","author":{"name":"Xufeng Zhang","email":"349abb4fbc6099c6fb21c550d9bd79979b03388b@windriver.com"},"message":"sctp: Fix sk_ack_backlog wrap-around problem\n\n[ Upstream commit d3217b15a19a4779c39b212358a5c71d725822ee ]\n\nConsider the scenario:\nFor a TCP-style socket, while processing the COOKIE_ECHO chunk in\nsctp_sf_do_5_1D_ce(), after it has passed a series of sanity check,\na new association would be created in sctp_unpack_cookie(), but afterwards,\nsome processing maybe failed, and sctp_association_free() will be called to\nfree the previously allocated association, in sctp_association_free(),\nsk_ack_backlog value is decremented for this socket, since the initial\nvalue for sk_ack_backlog is 0, after the decrement, it will be 65535,\na wrap-around problem happens, and if we want to establish new associations\nafterward in the same socket, ABORT would be triggered since sctp deem the\naccept queue as full.\nFix this issue by only decrementing sk_ack_backlog for associations in\nthe endpoint's list.\n\nFix-suggested-by: Neil Horman <nhorman@tuxdriver.com>\nSigned-off-by: Xufeng Zhang <xufeng.zhang@windriver.com>\nAcked-by: Daniel Borkmann <dborkman@redhat.com>\nAcked-by: Vlad Yasevich <vyasevich@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/dblockopp/G3_CooCoo_Kernel/commits/efe4cfc5a02f088b3262d9c2b7f0cf15f8780920"}]}
{"actor":{"display_login":"dblockopp"}}