On 7/11/19 9:28 AM, Christoph Paasch wrote: > > Would it make sense to always allow the alloc in tcp_fragment when coming > from __tcp_retransmit_skb() through the retransmit-timer ? > > AFAICS, the crasher was when an attacker sends "fake" SACK-blocks. Thus, we > would still be protected from too much fragmentation, but at least would > always allow the retransmission to go out. > > I guess this could be done and hopefully something that can be backported without too much pain, but I am sure some people will complain because reverting to timeouts might still show regressions :/
- RE: [PATCH net 2/4] tcp: tcp_fragment() shoul... Prout, Andrew - LLSC - MITLL
- Re: [PATCH net 2/4] tcp: tcp_fragment() ... Eric Dumazet
- RE: [PATCH net 2/4] tcp: tcp_fragmen... Prout, Andrew - LLSC - MITLL
- Re: [PATCH net 2/4] tcp: tcp_fra... Eric Dumazet
- Re: [PATCH net 2/4] tcp: tcp... Christoph Paasch
- Re: [PATCH net 2/4] tcp... Eric Dumazet
- Re: [PATCH net 2/4]... Michal Kubecek
- Re: [PATCH net ... Eric Dumazet
- Re: [PATCH net 2/4] tcp... Eric Dumazet
- RE: [PATCH net 2/4] tcp: tcp... Prout, Andrew - LLSC - MITLL
- Re: [PATCH net 2/4] tcp... Eric Dumazet
- Re: [PATCH net 2/4]... Jonathan Lemon
- Re: [PATCH net ... Eric Dumazet
- RE: [PATCH net 2/4] tcp... Prout, Andrew - LLSC - MITLL
- Re: [PATCH net 2/4] tcp: tcp_fragment() ... Bernd
- Re: [PATCH net 2/4] tcp: tcp_fragmen... Neal Cardwell