> skb_frag_unref() and skb_release_data() skip releasing references on > managed zerocopy fragments (SKBFL_MANAGED_FRAG_REFS), whereas > skb_frag_ref() acquires a reference unconditionally. If skb_frag_ref() > is called on a managed zerocopy SKB, the acquired reference is never > released by skb_frag_unref() or skb_release_data(). > > Skip acquiring a reference in skb_frag_ref() when skb_zcopy_managed(skb) > is true so skb_frag_ref() matches skb_frag_unref() and > skb_release_data(), and disable share_ok in iptfs_output_queued() when > skb_zcopy_managed(skb) is true so iptfs_consume_frags() does not append > unreferenced fragments into a managed zerocopy outer SKB. > > Signed-off-by: Mina Almasry <[email protected]>
Sashiko has reviewed this patch and found no issues. -- Sashiko AI review ยท https://sashiko.dev/#/patchset/[email protected]?part=1
