]> git.baikalelectronics.ru Git - kernel.git/commit
Merge branch 'tcp-robust-ooo'
authorDavid S. Miller <davem@davemloft.net>
Mon, 23 Jul 2018 19:01:36 +0000 (12:01 -0700)
committerDavid S. Miller <davem@davemloft.net>
Mon, 23 Jul 2018 19:01:48 +0000 (12:01 -0700)
commit05cc9a37f6dd0e27b8dce1ecb171a543ef71ed8b
tree67c0e66dbb4895d1c03116df3a63896c67431680
parent59c24c347232b29adb509bf3df7cc5546e1dbf19
parent758d34a8ffb9ccccf2ee2aaa30dcf4c2a37a07c3
Merge branch 'tcp-robust-ooo'

Eric Dumazet says:

====================
Juha-Matti Tilli reported that malicious peers could inject tiny
packets in out_of_order_queue, forcing very expensive calls
to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for
every incoming packet.

With tcp_rmem[2] default of 6MB, the ooo queue could
contain ~7000 nodes.

This patch series makes sure we cut cpu cycles enough to
render the attack not critical.

We might in the future go further, like disconnecting
or black-holing proven malicious flows.
====================

Signed-off-by: David S. Miller <davem@davemloft.net>