netdev - Re: [PATCH net 2/4] tcp: tcp_fragment() should apply sane memory limits

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20190814144132.GA2869@localhost.localdomain>
Date:   Wed, 14 Aug 2019 11:41:32 -0300
From:   Marcelo Ricardo Leitner <marcelo.leitner@...il.com>
To:     Bernd <ecki@...ammenkunft.net>
Cc:     Neal Cardwell <ncardwell@...gle.com>,
        netdev <netdev@...r.kernel.org>, edumazet@...gle.com
Subject: Re: [PATCH net 2/4] tcp: tcp_fragment() should apply sane memory
 limits

On Fri, Aug 02, 2019 at 09:58:12PM +0200, Bernd wrote:
> 2019-08-02 21:14 GMT+02:00, Neal Cardwell <ncardwell@...gle.com>:
> > What's the exact kernel version you are using?
> 
> It is the RHEL errata kernel 3.10.0-957.21.3.el7 (rhsa-2019:1481), i
> need to check if there is a newer one.

FWIW, this one doesn't have the patch below.

  Marcelo

> 
> > Eric submitted a patch recently that may address your issue:
> >    tcp: be more careful in tcp_fragment()
> >
> > https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=b617158dc096709d8600c53b6052144d12b89fab
> >
> > Would you be able to test your workload with that commit
> > cherry-picked, and see if the issue still occurs?
> 
> It only happens on a customer system in production up to now, so most
> likely not.
> 
> > That commit was targeted to many stable releases, so you may be able
> > to pick up that fix from a stable branch.
> 
> The only thing which is a bit strange, this is a Java client, and I am
> pretty sure we don’t set a small SO_SNDBUF, if anything it is
> increased (I need to verify that).
> 
> Not to worry, I guess I can now with your helpful pointer sort that
> out with Redhat.
> 
> gruss
> Bernd
>