]> git.kernelconcepts.de Git - karo-tx-linux.git/commit
[PATCH] SCTP: Allow spillover of receive buffer to avoid deadlock. (CVE-2006-2275)
authorNeil Horman <nhorman@tuxdriver.com>
Sat, 6 May 2006 00:02:09 +0000 (17:02 -0700)
committerChris Wright <chrisw@sous-sol.org>
Tue, 9 May 2006 19:53:21 +0000 (12:53 -0700)
commit2e2a2cd09dd7b3fbc99a1879a54090fd6db16f0c
tree0ec7e0b342f783c4a6ebe9ed083ddec41182041f
parentcb19baa0bb7a4064e6d0c99e8f479673120a9f28
[PATCH] SCTP: Allow spillover of receive buffer to avoid deadlock. (CVE-2006-2275)

This patch fixes a deadlock situation in the receive path by allowing
temporary spillover of the receive buffer.

- If the chunk we receive has a tsn that immediately follows the ctsn,
  accept it even if we run out of receive buffer space and renege data with
  higher TSNs.
- Once we accept one chunk in a packet, accept all the remaining chunks
  even if we run out of receive buffer space.

Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
Acked-by: Mark Butler <butlerm@middle.net>
Acked-by: Vlad Yasevich <vladislav.yasevich@hp.com>
Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
include/net/sctp/structs.h
net/sctp/inqueue.c
net/sctp/sm_statefuns.c