Soheil Hassas Yeganeh 75020d6319 tcp: clear tp->packets_out when purging write queue ...

Clear tp->packets_out when purging the write queue, otherwise
tcp_rearm_rto() mistakenly assumes TCP write queue is not empty.
This results in NULL pointer dereference.

Also, remove the redundant `tp->packets_out = 0` from
tcp_disconnect(), since tcp_disconnect() calls
tcp_write_queue_purge().

Fixes: a27fd7a8ed (tcp: purge write queue upon RST)
Reported-by: Subash Abhinov Kasiviswanathan <subashab@codeaurora.org>
Reported-by: Sami Farin <hvtaifwkbgefbaei@gmail.com>
Tested-by: Sami Farin <hvtaifwkbgefbaei@gmail.com>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Soheil Hassas Yeganeh <soheil@google.com>
Acked-by: Yuchung Cheng <ycheng@google.com>
Acked-by: Neal Cardwell <ncardwell@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-04-29 11:33:13 +02:00

..

netfilter

netfilter: compat: prepare xt_compat_init_offsets to return errors

2018-04-26 11:02:21 +02:00

af_inet.c

net: accept UFO datagrams from tuntap and packet

2017-12-17 15:07:58 +01:00

ah4.c

…

arp.c

arp: fix arp_filter on l3slave devices

2018-04-12 12:32:22 +02:00

cipso_ipv4.c

tcp/dccp: fix ireq->opt races

2017-10-21 01:33:19 +01:00

datagram.c

…

devinet.c

ipv4: igmp: guard against silly MTU values

2018-01-02 20:31:06 +01:00

esp4_offload.c

esp: Fix GRO when the headers not fully in the linear part of the skb.

2018-02-25 11:07:46 +01:00

esp4.c

…

fib_frontend.c

ipv4: Fix use-after-free when flushing FIB tables

2018-01-02 20:31:09 +01:00

fib_lookup.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

fib_notifier.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

fib_rules.c

…

fib_semantics.c

route: check sysctl_fib_multipath_use_neigh earlier than hash

2018-04-12 12:32:27 +02:00

fib_trie.c

…

fou.c

…

gre_demux.c

…

gre_offload.c

gso: fix payload length when gso_size is zero

2017-10-08 10:12:15 -07:00

icmp.c

icmp: don't fail on fragment reassembly time exceeded

2017-12-20 10:10:37 +01:00

igmp.c

net: igmp: add a missing rcu locking section

2018-02-13 10:19:47 +01:00

inet_connection_sock.c

Revert "defer call to mem_cgroup_sk_alloc()"

2018-02-13 10:19:48 +01:00

inet_diag.c

…

inet_fragment.c

net: Fix hlist corruptions in inet_evict_bucket()

2018-03-31 18:10:40 +02:00

inet_hashtables.c

soreuseport: fix initialization race

2017-10-22 02:03:51 +01:00

inet_timewait_sock.c

kmemcheck: remove annotations

2018-02-22 15:42:23 +01:00

inetpeer.c

inetpeer: fix RCU lookup() again

2017-09-28 09:39:34 -07:00

ip_forward.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

ip_fragment.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

ip_gre.c

ip_gre: fix potential memory leak in erspan_rcv

2018-03-24 11:01:27 +01:00

ip_input.c

IPv4: early demux can return an error code

2017-10-01 03:55:47 +01:00

ip_options.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

ip_output.c

…

ip_sockglue.c

net: Only honor ifindex in IP_PKTINFO if non-0

2018-03-31 18:10:41 +02:00

ip_tunnel_core.c

…

ip_tunnel.c

ip_tunnel: better validate user provided tunnel names

2018-04-12 12:32:25 +02:00

ip_vti.c

vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit

2017-09-26 09:58:21 -07:00

ipcomp.c

…

ipconfig.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

ipip.c

ipip: only increase err_count for some certain type icmp in ipip_err

2017-10-27 23:43:31 +09:00

ipmr.c

…

Kconfig

ip: update policy routing config help

2017-10-12 22:57:11 -07:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

netfilter.c

…

ping.c

…

proc.c

…

protocol.c

…

raw_diag.c

…

raw.c

net: ipv4: fix for a race condition in raw_sendmsg

2018-01-02 20:31:08 +01:00

route.c

net: ipv4: Set addr_type in hash_keys for forwarded case

2018-03-08 22:41:15 -08:00

syncookies.c

tcp/dccp: fix ireq->opt races

2017-10-21 01:33:19 +01:00

sysctl_net_ipv4.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

tcp_bbr.c

tcp_bbr: fix pacing_gain to always be unity when using lt_bw

2018-02-13 10:19:48 +01:00

tcp_bic.c

…

tcp_cdg.c

…

tcp_cong.c

…

tcp_cubic.c

…

tcp_dctcp.c

…

tcp_diag.c

…

tcp_fastopen.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

tcp_highspeed.c

…

tcp_htcp.c

…

tcp_hybla.c

…

tcp_illinois.c

…

tcp_input.c

tcp: don't read out-of-bounds opsize

2018-04-29 11:33:11 +02:00

tcp_ipv4.c

tcp md5sig: Use skb's saddr when replying to an incoming segment

2018-01-02 20:31:07 +01:00

tcp_lp.c

…

tcp_metrics.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

tcp_minisocks.c

tcp/dccp: block bh before arming time_wait timer

2017-12-17 15:07:57 +01:00

tcp_nv.c

tcp_nv: fix potential integer overflow in tcpnv_acked

2018-04-26 11:02:13 +02:00

tcp_offload.c

gso: validate gso_type in GSO handlers

2018-01-31 14:03:47 +01:00

tcp_output.c

tcp_bbr: better deal with suboptimal GSO

2018-03-08 22:41:13 -08:00

tcp_probe.c

…

tcp_rate.c

tcp: invalidate rate samples during SACK reneging

2018-01-02 20:31:09 +01:00

tcp_recovery.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

tcp_scalable.c

…

tcp_timer.c

tcp: purge write queue upon aborting the connection

2018-03-31 18:10:38 +02:00

tcp_ulp.c

…

tcp_vegas.c

tcp: fix under-evaluated ssthresh in TCP Vegas

2017-12-25 14:26:30 +01:00

tcp_vegas.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

tcp_veno.c

…

tcp_westwood.c

…

tcp_yeah.c

…

tcp.c

tcp: clear tp->packets_out when purging write queue

2018-04-29 11:33:13 +02:00

tunnel4.c

…

udp_diag.c

…

udp_impl.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

udp_offload.c

gso: validate gso_type in GSO handlers

2018-01-31 14:03:47 +01:00

udp_tunnel.c

…

udp.c

udplite: fix partial checksum initialization

2018-03-08 22:41:10 -08:00

udplite.c

…

xfrm4_input.c

xfrm: Reinject transport-mode packets through tasklet

2018-03-03 10:24:25 +01:00

xfrm4_mode_beet.c

…

xfrm4_mode_transport.c

…

xfrm4_mode_tunnel.c

…

xfrm4_output.c

…

xfrm4_policy.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm4_protocol.c

…

xfrm4_state.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm4_tunnel.c

…