Home Home > GIT Browse
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichal Kubecek <mkubecek@suse.cz>2019-07-09 08:16:48 +0200
committerMichal Kubecek <mkubecek@suse.cz>2019-07-09 08:16:48 +0200
commitb7aa760403ec70e0c95fe900db99702e9c0de54b (patch)
tree6e7b45314bce1b5a199f9500bed4636256909525
parentea9c96b59d8300a4f75629075681707f8a58d558 (diff)
- tcp: refine memory limit test in tcp_fragment() (CVE-2019-11478
bsc#1137586 bsc#1139751). - Refresh patches.kabi/kabi-drop-LINUX_MIB_TCPWQUEUETOOBIG-snmp-counter.patch. suse-commit: 18fef7f39b297fc9b860faccf59fad6e0e7e0fb4
-rw-r--r--net/ipv4/tcp_output.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/ipv4/tcp_output.c b/net/ipv4/tcp_output.c
index ab6a597099ad..3436b32a9bfa 100644
--- a/net/ipv4/tcp_output.c
+++ b/net/ipv4/tcp_output.c
@@ -1273,7 +1273,7 @@ int tcp_fragment(struct sock *sk, struct sk_buff *skb, u32 len,
if (nsize < 0)
nsize = 0;
- if (unlikely((sk->sk_wmem_queued >> 1) > sk->sk_sndbuf))
+ if (unlikely((sk->sk_wmem_queued >> 1) > sk->sk_sndbuf + 0x20000))
return -ENOMEM;
if (skb_unclone(skb, gfp))