Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 4a1ff6e2 authored by Patrick McHardy's avatar Patrick McHardy Committed by David S. Miller
Browse files

[TCP]: tcp_highspeed: fix AIMD table out-of-bounds access 



Covertiy #547

Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent cc9a06cd

net/ipv4/tcp_highspeed.c

+1 −1
Original line number Diff line number Diff line
@@ -125,7 +125,7 @@ static void hstcp_cong_avoid(struct sock *sk, u32 adk, u32 rtt, 
		/* Update AIMD parameters */

		if (tp->snd_cwnd > hstcp_aimd_vals[ca->ai].cwnd) {

			while (tp->snd_cwnd > hstcp_aimd_vals[ca->ai].cwnd &&

			       ca->ai < HSTCP_AIMD_MAX)

			       ca->ai < HSTCP_AIMD_MAX - 1)

				ca->ai++;

		} else if (tp->snd_cwnd < hstcp_aimd_vals[ca->ai].cwnd) {

			while (tp->snd_cwnd > hstcp_aimd_vals[ca->ai].cwnd &&