Re: crash?

Alan Cox (alan@lxorguk.ukuu.org.uk)
Sat, 18 Apr 1998 18:11:47 +0100 (BST)

> Apr 18 00:44:46 nlc1 kernel: Warning: kfree_skb passed an skb still
> on a list (from 03120108).
>
> System: Red Hat 5.0, kernel 2.0.33 (compiled without modules), NCR 875
> SCSI controller.

Recently discovered problem - theres a patch file (included) and also
new kernel rpms on ftp.redhat.com

Alan

--- ip_fragment.c.old Thu Apr 16 12:25:34 1998
+++ ip_fragment.c Thu Apr 16 12:29:02 1998
@@ -375,7 +375,7 @@
fp = qp->fragments;
while(fp != NULL)
{
- if (fp->len < 0 || count+fp->len > skb->len)
+ if (fp->len < 0 || fp->offset+qp->ihlen+fp->len > skb->len)
{
NETDEBUG(printk("Invalid fragment list: Fragment over size.\n"));
ip_free(qp);

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu