Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 4bdab433 authored by Vlad Yasevich's avatar Vlad Yasevich Committed by David S. Miller
Browse files

sctp: Do not reset the packet during sctp_packet_config(). 



sctp_packet_config() is called when getting the packet ready
for appending of chunks.  The function should not touch the
current state, since it's possible to ping-pong between two
transports when sending, and that can result packet corruption
followed by skb overlfow crash.

Reported-by: default avatarThomas Dreibholz <dreibh@iem.uni-due.de>
Signed-off-by: default avatarVlad Yasevich <vladislav.yasevich@hp.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 2507136f

net/sctp/output.c

+0 −1
Original line number Diff line number Diff line
@@ -92,7 +92,6 @@ struct sctp_packet *sctp_packet_config(struct sctp_packet *packet, 
	SCTP_DEBUG_PRINTK("%s: packet:%p vtag:0x%x\n", __func__,

			  packet, vtag);



	sctp_packet_reset(packet);

	packet->vtag = vtag;



	if (ecn_capable && sctp_packet_empty(packet)) {