From: Paolo Abeni Date: Tue, 1 Oct 2024 09:47:08 +0000 (+0200) Subject: Merge branch 'net-two-fixes-for-qdisc_pkt_len_init' X-Git-Tag: v6.12~263^2~20 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=23e19f2473c8762438baa1bcf3f71ee16dfcd535;p=platform%2Fkernel%2Flinux-amlogic.git Merge branch 'net-two-fixes-for-qdisc_pkt_len_init' Eric Dumazet says: ==================== net: two fixes for qdisc_pkt_len_init() Inspired by one syzbot report. At least one qdisc (fq_codel) depends on qdisc_skb_cb(skb)->pkt_len having a sane value (not zero) With the help of af_packet, syzbot was able to fool qdisc_pkt_len_init() to precisely set qdisc_skb_cb(skb)->pkt_len to zero. First patch fixes this issue. Second one (a separate one to help future bisections) adds more sanity check to SKB_GSO_DODGY users. ==================== Link: https://patch.msgid.link/20240924150257.1059524-1-edumazet@google.com Signed-off-by: Paolo Abeni --- 23e19f2473c8762438baa1bcf3f71ee16dfcd535