Re: [PATCH net] tcp: clear saved_syn in tcp_disconnect()

2017-04-09 Thread David Miller
From: Eric Dumazet Date: Sat, 08 Apr 2017 08:07:33 -0700 > From: Eric Dumazet > > In the (very unlikely) case a passive socket becomes a listener, > we do not want to duplicate its saved SYN headers. > > This would lead to double frees, use after free, and please hackers and > various fuzzers

[PATCH net] tcp: clear saved_syn in tcp_disconnect()

2017-04-08 Thread Eric Dumazet
From: Eric Dumazet In the (very unlikely) case a passive socket becomes a listener, we do not want to duplicate its saved SYN headers. This would lead to double frees, use after free, and please hackers and various fuzzers Tested: 0 socket(..., SOCK_STREAM, IPPROTO_TCP) = 3 +0 setsockop