Eric Dumazet 7966e76f6a tcp: avoid integer overflows in tcp_rcv_space_adjust() ...

commit 607065bad9 upstream.

When using large tcp_rmem[2] values (I did tests with 500 MB),
I noticed overflows while computing rcvwin.

Lets fix this before the following patch.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Acked-by: Soheil Hassas Yeganeh <soheil@google.com>
Acked-by: Wei Wang <weiwan@google.com>
Acked-by: Neal Cardwell <ncardwell@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
[Backport: sysctl_tcp_rmem is not Namespace-ify'd in older kernels]
Signed-off-by: Guenter Roeck <linux@roeck-us.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-06-06 16:44:34 +02:00

..

netfilter

netfilter: nf_nat_h323: fix logical-not-parentheses warning

2018-04-08 12:12:44 +02:00

af_inet.c

igmp: Fix regression caused by igmp sysctl namespace code.

2017-08-12 19:31:22 -07:00

ah4.c

ipsec: check return value of skb_to_sgvec always

2018-04-13 19:48:31 +02:00

arp.c

arp: fix arp_filter on l3slave devices

2018-04-13 19:48:32 +02:00

cipso_ipv4.c

tcp/dccp: fix ireq->opt races

2017-11-18 11:22:22 +01:00

datagram.c

…

devinet.c

ipv4: igmp: guard against silly MTU values

2018-01-02 20:35:10 +01:00

esp4.c

ipsec: check return value of skb_to_sgvec always

2018-04-13 19:48:31 +02:00

fib_frontend.c

ipv4: Fix use-after-free when flushing FIB tables

2018-01-02 20:35:12 +01:00

fib_lookup.h

…

fib_rules.c

…

fib_semantics.c

route: check sysctl_fib_multipath_use_neigh earlier than hash

2018-04-13 19:48:36 +02:00

fib_trie.c

net: Improve handling of failures on link and route dumps

2017-06-07 12:07:44 +02:00

fou.c

…

gre_demux.c

…

gre_offload.c

gso: fix payload length when gso_size is zero

2017-11-18 11:22:20 +01:00

icmp.c

icmp: don't fail on fragment reassembly time exceeded

2017-12-20 10:07:33 +01:00

igmp.c

net: igmp: add a missing rcu locking section

2018-02-13 12:35:56 +01:00

inet_connection_sock.c

tcp/dccp: fix other lockdep splats accessing ireq_opt

2017-11-18 11:22:22 +01:00

inet_diag.c

…

inet_fragment.c

net: Fix hlist corruptions in inet_evict_bucket()

2018-03-31 18:11:33 +02:00

inet_hashtables.c

soreuseport: fix initialization race

2017-11-18 11:22:22 +01:00

inet_timewait_sock.c

soreuseport: initialise timewait reuseport field

2018-05-16 10:08:41 +02:00

inetpeer.c

…

ip_forward.c

…

ip_fragment.c

inet: frag: release spinlock before calling icmp_send()

2017-12-25 14:23:39 +01:00

ip_gre.c

…

ip_input.c

…

ip_options.c

…

ip_output.c

net: test tailroom before appending to linear skb

2018-05-25 16:12:55 +02:00

ip_sockglue.c

net: Only honor ifindex in IP_PKTINFO if non-0

2018-03-31 18:11:34 +02:00

ip_tunnel_core.c

…

ip_tunnel.c

ip_tunnel: better validate user provided tunnel names

2018-04-13 19:48:34 +02:00

ip_vti.c

Revert "vti4: Don't override MTU passed on link creation via IFLA_MTU"

2018-05-30 22:25:17 +02:00

ipcomp.c

…

ipconfig.c

net: ipconfig: fix ic_close_devs() use-after-free

2017-12-25 14:23:42 +01:00

ipip.c

ipip: only increase err_count for some certain type icmp in ipip_err

2017-11-18 11:22:23 +01:00

ipmr.c

ipmr: vrf: Find VIFs using the actual device

2018-04-13 19:47:59 +02:00

Kconfig

…

Makefile

…

netfilter.c

netfilter: use skb_to_full_sk in ip_route_me_harder

2017-07-05 14:40:28 +02:00

ping.c

ipv4: fix memory leaks in udp_sendmsg, ping_v4_sendmsg

2018-05-19 10:26:57 +02:00

proc.c

…

protocol.c

…

raw.c

net: ipv4: fix for a race condition in raw_sendmsg

2018-01-02 20:35:12 +01:00

route.c

ipv4: lock mtu in fnhe when received PMTU < net.ipv4.route.min_pmtu

2018-05-30 07:50:36 +02:00

syncookies.c

tcp/dccp: fix ireq->opt races

2017-11-18 11:22:22 +01:00

sysctl_net_ipv4.c

ipv4: make tcp_notsent_lowat sysctl knob behave as true unsigned int

2017-08-11 08:49:35 -07:00

tcp_bbr.c

tcp_bbr: fix to zero idle_restart only upon S/ACKed data

2018-05-19 10:26:59 +02:00

tcp_bic.c

…

tcp_cdg.c

…

tcp_cong.c

tcp: disallow cwnd undo when switching congestion control

2017-06-14 15:05:52 +02:00

tcp_cubic.c

…

tcp_dctcp.c

…

tcp_diag.c

…

tcp_fastopen.c

…

tcp_highspeed.c

…

tcp_htcp.c

…

tcp_hybla.c

…

tcp_illinois.c

net/tcp/illinois: replace broken algorithm reference link

2018-05-30 07:50:33 +02:00

tcp_input.c

tcp: avoid integer overflows in tcp_rcv_space_adjust()

2018-06-06 16:44:34 +02:00

tcp_ipv4.c

tcp md5sig: Use skb's saddr when replying to an incoming segment

2018-01-02 20:35:11 +01:00

tcp_lp.c

tcp: fix wraparound issue in tcp_lp

2017-05-14 14:00:21 +02:00

tcp_metrics.c

…

tcp_minisocks.c

tcp/dccp: block bh before arming time_wait timer

2017-12-16 16:25:46 +01:00

tcp_nv.c

tcp_nv: fix potential integer overflow in tcpnv_acked

2018-05-30 07:50:22 +02:00

tcp_offload.c

gso: validate gso_type in GSO handlers

2018-01-31 12:55:55 +01:00

tcp_output.c

tcp: purge write queue in tcp_connect_init()

2018-05-25 16:12:55 +02:00

tcp_probe.c

tcp: tcp_probe: use spin_lock_bh()

2017-06-17 06:41:49 +02:00

tcp_rate.c

tcp: invalidate rate samples during SACK reneging

2018-01-02 20:35:13 +01:00

tcp_recovery.c

…

tcp_scalable.c

…

tcp_timer.c

net: tcp: close sock if net namespace is exiting

2018-01-31 12:55:54 +01:00

tcp_vegas.c

tcp: fix under-evaluated ssthresh in TCP Vegas

2017-12-25 14:23:45 +01:00

tcp_vegas.h

…

tcp_veno.c

…

tcp_westwood.c

…

tcp_yeah.c

…

tcp.c

tcp: ignore Fast Open on repair mode

2018-05-19 10:26:59 +02:00

tunnel4.c

…

udp_diag.c

…

udp_impl.h

…

udp_offload.c

gso: validate gso_type in GSO handlers

2018-01-31 12:55:55 +01:00

udp_tunnel.c

…

udp.c

ipv4: fix memory leaks in udp_sendmsg, ping_v4_sendmsg

2018-05-19 10:26:57 +02:00

udplite.c

…

xfrm4_input.c

…

xfrm4_mode_beet.c

…

xfrm4_mode_transport.c

…

xfrm4_mode_tunnel.c

…

xfrm4_output.c

…

xfrm4_policy.c

ipv4: lock mtu in fnhe when received PMTU < net.ipv4.route.min_pmtu

2018-05-30 07:50:36 +02:00

xfrm4_protocol.c

…

xfrm4_state.c

…

xfrm4_tunnel.c

…