Searched hist:b2b7af861122a0c0f6260155c29a1b2e594cd5b5 (Results 1 – 1 of 1) sorted by relevance
| /linux/net/ipv4/ |
| H A D | tcp_output.c | diff b2b7af861122a0c0f6260155c29a1b2e594cd5b5 Wed Dec 05 23:38:38 CET 2018 Yuchung Cheng <ycheng@google.com> tcp: fix NULL ref in tail loss probe
TCP loss probe timer may fire when the retranmission queue is empty but
has a non-zero tp->packets_out counter. tcp_send_loss_probe will call
tcp_rearm_rto which triggers NULL pointer reference by fetching the
retranmission queue head in its sub-routines.
Add a more detailed warning to help catch the root cause of the inflight
accounting inconsistency.
Reported-by: Rafael Tinoco <rafael.tinoco@linaro.org>
Signed-off-by: Yuchung Cheng <ycheng@google.com>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Neal Cardwell <ncardwell@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
|