kernel.git/net/sctp/input.c, branch linux-2.6.28.y

sctp: Fix another socket race during accept/peeloff

2009-02-12T17:50:38Z

commit ae53b5bd77719fed58086c5be60ce4f22bffe1c6 upstream. There is a race between sctp_rcv() and sctp_accept() where we have moved the association from the listening socket to the accepted socket, but sctp_rcv() processing cached the old socket and continues to use it. The easy solution is to check for the socket mismatch once we've grabed the socket lock. If we hit a mis-match, that means that were are currently holding the lock on the listening socket, but the association is refrencing a newly accepted socket. We need to drop the lock on the old socket and grab the lock on the new one. A more proper solution might be to create accepted sockets when the new association is established, similar to TCP. That would eliminate the race for 1-to-1 style sockets, but it would still existing for 1-to-many sockets where a user wished to peeloff an association. For now, we'll live with this easy solution as it addresses the problem. Reported-by: Michal Hocko Reported-by: Karsten Keil Signed-off-by: Vlad Yasevich Signed-off-by: David S. Miller Signed-off-by: Greg Kroah-Hartman

sctp: Drop ICMP packet too big message with MTU larger than current PMTU

2008-10-23T07:59:52Z

If ICMP packet too big message is received with MTU larger than current PMTU, SCTP will still accept this ICMP message and sync the PMTU of assoc with the wrong MTU. Endpoing A Endpoint B (ESTABLISHED) (ESTABLISHED) ICMP ---------> (packet too big, MTU too larger) sync PMTU This patch fixed the problem by drop that ICMP message. Signed-off-by: Wei Yongjun Signed-off-by: Vlad Yasevich Signed-off-by: David S. Miller

sctp: remove unnecessary byteshifting, calculate directly in big-endian

2008-07-19T06:07:09Z

Signed-off-by: Harvey Harrison Signed-off-by: Vlad Yasevich Signed-off-by: David S. Miller

mib: add net to NET_INC_STATS_BH

2008-07-17T03:31:16Z

Signed-off-by: Pavel Emelyanov Signed-off-by: David S. Miller

mib: add struct net to ICMP_INC_STATS_BH

2008-07-15T06:05:29Z

Signed-off-by: Pavel Emelyanov Signed-off-by: David S. Miller

sctp: Validate Initiate Tag when handling ICMP message

2008-06-19T23:07:48Z

This patch add to validate initiate tag and chunk type if verification tag is 0 when handling ICMP message. RFC 4960, Appendix C. ICMP Handling ICMP6) An implementation MUST validate that the Verification Tag contained in the ICMP message matches the Verification Tag of the peer. If the Verification Tag is not 0 and does NOT match, discard the ICMP message. If it is 0 and the ICMP message contains enough bytes to verify that the chunk type is an INIT chunk and that the Initiate Tag matches the tag of the peer, continue with ICMP7. If the ICMP message is too short or the chunk type or the Initiate Tag does not match, silently discard the packet. Signed-off-by: Wei Yongjun Signed-off-by: Vlad Yasevich Signed-off-by: David S. Miller

SCTP: Remove useless assignment from __sctp_rcv_lookup_endpoint

2008-04-10T09:00:23Z

Signed-off-by: Gui Jianfeng Signed-off-by: David S. Miller

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6

2008-03-18T07:37:55Z

Conflicts: drivers/net/wireless/rt2x00/rt2x00dev.c net/8021q/vlan_dev.c

[SCTP]: fix misannotated __sctp_rcv_asconf_lookup()

2008-03-18T05:47:32Z

Signed-off-by: Al Viro Signed-off-by: David S. Miller

net: replace remaining FUNCTION occurrences

2008-03-06T04:47:47Z

__FUNCTION__ is gcc-specific, use __func__ Signed-off-by: Harvey Harrison Signed-off-by: David S. Miller