tcp: fix overflow in __tcp_retransmit_skb()
authorEric Dumazet <edumazet@google.com>
Thu, 15 Sep 2016 15:12:33 +0000 (08:12 -0700)
committerBen Hutchings <ben@decadent.org.uk>
Thu, 16 Mar 2017 02:18:52 +0000 (02:18 +0000)
commitb2c5b70422d6f729f57aa429c0c166159ba8c8d4
treee0d03cc0fc5816b18b5fbeb0140951262889a6a6
parent065d8e5a8975d0a576f0d1cb50108455e79f7c63
tcp: fix overflow in __tcp_retransmit_skb()

[ Upstream commit ffb4d6c8508657824bcef68a36b2a0f9d8c09d10 ]

If a TCP socket gets a large write queue, an overflow can happen
in a test in __tcp_retransmit_skb() preventing all retransmits.

The flow then stalls and resets after timeouts.

Tested:

sysctl -w net.core.wmem_max=1000000000
netperf -H dest -- -s 1000000000

Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
net/ipv4/tcp_output.c