From: David S. Miller <davem@davemloft.net>
Date: Sun, 28 Oct 2018 17:35:12 +0000 (-0700)
Subject: net: Properly unlink GRO packets on overflow.
X-Git-Tag: rel_imx_4.19.35_1.1.0~9081
X-Git-Url: https://git.somdevices.com/?a=commitdiff_plain;h=89e5f2d9219dbd522e6d60e7639f09fa1ccda1cd;p=linux.git

net: Properly unlink GRO packets on overflow.

[ Upstream commti ece23711dd956cd5053c9cb03e9fe0668f9c8894 ]

Just like with normal GRO processing, we have to initialize
skb->next to NULL when we unlink overflow packets from the
GRO hash lists.

Fixes: d4546c2509b1 ("net: Convert GRO SKB handling to list_head.")
Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
Tested-by: Oleksandr Natalenko <oleksandr@natalenko.name>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---

diff --git a/net/core/dev.c b/net/core/dev.c
index 93243479085f..e16ba3625400 100644
--- a/net/core/dev.c
+++ b/net/core/dev.c
@@ -5431,6 +5431,7 @@ static void gro_flush_oldest(struct list_head *head)
 	 * SKB to the chain.
 	 */
 	list_del(&oldest->list);
+	oldest->next = NULL;
 	napi_gro_complete(oldest);
 }