Wang Zhan wrote: > skb_segment() clears gso_size on the last output of a group which holds one > MSS or less, but leaves gso_segs and gso_type as the grouping set them, so > the tail is still counted as the whole group. Readers which take gso_segs > without testing gso_size first, such as the ECT statistics in ip_rcv_core() > and tp->rcv_ooopack in tcp_rcv_established(), see that stale count, and a > re-segmented output reaches them when a veth or bridge port delivers it back > into the receive path. > > Clear gso_size, gso_segs and gso_type together with skb_gso_reset(). > > Suggested-by: Willem de Bruijn <[email protected]> > Assisted-by: LLM > Signed-off-by: Wang Zhan <[email protected]>
Reviewed-by: Willem de Bruijn <[email protected]> _______________________________________________ dev mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-dev
