Re: [PATCH net] ipv6: fix udpv6 sendmsg crash caused by too small MTU

2018-01-15 Thread David Miller
From: Mike Maloney Date: Wed, 10 Jan 2018 12:45:10 -0500 > From: Mike Maloney > > The logic in __ip6_append_data() assumes that the MTU is at least large > enough for the headers. A device's MTU may be adjusted after being > added while sendmsg() is processing data, resulting in > __ip6_append

Re: [PATCH net] ipv6: fix udpv6 sendmsg crash caused by too small MTU

2018-01-10 Thread Eric Dumazet
On Wed, 2018-01-10 at 12:45 -0500, Mike Maloney wrote: > From: Mike Maloney > > The logic in __ip6_append_data() assumes that the MTU is at least large > enough for the headers. A device's MTU may be adjusted after being > added while sendmsg() is processing data, resulting in > __ip6_append_dat

[PATCH net] ipv6: fix udpv6 sendmsg crash caused by too small MTU

2018-01-10 Thread Mike Maloney
From: Mike Maloney The logic in __ip6_append_data() assumes that the MTU is at least large enough for the headers. A device's MTU may be adjusted after being added while sendmsg() is processing data, resulting in __ip6_append_data() seeing any MTU. For an mtu smaller than the size of the fragme

Re: [PATCH net] ipv6: fix udpv6 sendmsg crash caused by too small MTU

2018-01-10 Thread Mike Maloney
D'oh - resending with fixes. Thanks Eric. On Wed, Jan 10, 2018 at 12:21 PM, Eric Dumazet wrote: > On Wed, 2018-01-10 at 12:10 -0500, Mike Maloney wrote: >> From: Mike Maloney >> >> The logic in __ip6_append_data() assumes that the MTU is at least large >> enough for the headers. A device's MTU

Re: [PATCH net] ipv6: fix udpv6 sendmsg crash caused by too small MTU

2018-01-10 Thread Eric Dumazet
On Wed, 2018-01-10 at 12:10 -0500, Mike Maloney wrote: > From: Mike Maloney > > The logic in __ip6_append_data() assumes that the MTU is at least large > enough for the headers. A device's MTU may be adjusted after being > added while sendmsg() is processing data, resulting in > __ip6_append_dat

[PATCH net] ipv6: fix udpv6 sendmsg crash caused by too small MTU

2018-01-10 Thread Mike Maloney
From: Mike Maloney The logic in __ip6_append_data() assumes that the MTU is at least large enough for the headers. A device's MTU may be adjusted after being added while sendmsg() is processing data, resulting in __ip6_append_data() seeing any MTU. For an mtu smaller than the size of the fragme