From: Eric Dumazet <eduma...@google.com>
Date: Wed, 1 May 2019 18:56:28 -0700
> syzbot was able to crash host by sending UDP packets with a 0 payload.
>
> TCP does not have this issue since we do not aggregate packets without
> payload.
>
> Since dev_gro_receive() sets gso_size based on skb_gro_len(skb)
> it seems not worth trying to cope with padded packets.
...
> Fixes: e20cf8d3f1f7 ("udp: implement GRO for plain UDP sockets.")
> Signed-off-by: Eric Dumazet <eduma...@google.com>
> Cc: Paolo Abeni <pab...@redhat.com>
> Reported-by: syzbot <syzkal...@googlegroups.com>
Ugh :(
Applied and queued up for -stable, thanks Eric.
