Zhiping Du 5a87e33d04 tcp: tcp_fragment() should apply sane memory limits ... [upstream commit f070ef2ac66716357066b683fb0baf55f8191a2e] Jonathan Looney reported that a malicious peer can force a sender to fragment its retransmit queue into tiny skbs, inflating memory usage and/or overflow 32bit counters. TCP allows an application to queue up to sk_sndbuf bytes, so we need to give some allowance for non malicious splitting of retransmit queue. A new SNMP counter is added to monitor how many times TCP did not allow to split an skb if the allowance was exceeded. Note that this counter might increase in the case applications use SO_SNDBUF socket option to lower sk_sndbuf. CVE-2019-11478 : tcp_fragment, prevent fragmenting a packet when the socket is already using more than half the allowed space Signed-off-by: Zhiping Du <zhipingdu@tencent.com>		2020-01-02 12:16:41 +08:00
..
asm-generic	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
drm	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
linux	tcp: tcp_fragment() should apply sane memory limits	2020-01-02 12:16:41 +08:00
misc	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
mtd	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
rdma	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
scsi	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
sound	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
video	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
xen	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00