]> www.infradead.org Git - users/hch/misc.git/commit
Merge branch 'udp-fix-two-integer-overflows-when-sk-sk_rcvbuf-is-close-to-int_max'
authorJakub Kicinski <kuba@kernel.org>
Thu, 3 Apr 2025 00:18:28 +0000 (17:18 -0700)
committerJakub Kicinski <kuba@kernel.org>
Thu, 3 Apr 2025 00:18:29 +0000 (17:18 -0700)
commit0ff0faf7afb4f990dceb0d9f8041fa00e118bc0d
tree0c7c453c7bd9ef67d6d3ec6de42c33554fc824d5
parent1b7fdc702c031134c619b74c4f311c590e50ca3d
parentdf207de9d9e7a4d92f8567e2c539d9c8c12fd99d
Merge branch 'udp-fix-two-integer-overflows-when-sk-sk_rcvbuf-is-close-to-int_max'

Kuniyuki Iwashima says:

====================
udp: Fix two integer overflows when sk->sk_rcvbuf is close to INT_MAX.

I got a report that UDP mem usage in /proc/net/sockstat did not
drop even after an application was terminated.

The issue could happen if sk->sk_rmem_alloc wraps around due
to a large sk->sk_rcvbuf, which was INT_MAX in our case.

The patch 2 fixes the issue, and the patch 1 fixes yet another
overflow I found while investigating the issue.

v3: https://lore.kernel.org/20250327202722.63756-1-kuniyu@amazon.com
v2: https://lore.kernel.org/20250325195826.52385-1-kuniyu@amazon.com
v1: https://lore.kernel.org/20250323231016.74813-1-kuniyu@amazon.com
====================

Link: https://patch.msgid.link/20250401184501.67377-1-kuniyu@amazon.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>