commit ccb1df4579af30460f1ebd6a5fbe84c2526181b1
Author: Anand H. Krishnan <email address hidden>
Date: Mon May 8 15:08:00 2017 +0530
A cloned skbuff should not be sent to napi_gro_receive
When skb_gro_receive merges skbs/fragments, it does not take
a reference to the underlying page, thus transferring the
original reference it had to the first packet of the packet
bundle. This will work fine for non-cloned packets.
However, for cloned packets, when the gro-ed packet is
eventually freed (because the original skb was not cloned and
hence reference was 1), the merged skb's frags also get freed
(put_page-ed) without taking into account the other references
that were held for the fragments (dataref). This will result in
bad page problems.
Reviewed: https:/ /review. opencontrail. org/31284 github. com/Juniper/ contrail- vrouter/ commit/ ccb1df4579af304 60f1ebd6a5fbe84 c2526181b1
Committed: http://
Submitter: Zuul (<email address hidden>)
Branch: R3.0
commit ccb1df4579af304 60f1ebd6a5fbe84 c2526181b1
Author: Anand H. Krishnan <email address hidden>
Date: Mon May 8 15:08:00 2017 +0530
A cloned skbuff should not be sent to napi_gro_receive
When skb_gro_receive merges skbs/fragments, it does not take
a reference to the underlying page, thus transferring the
original reference it had to the first packet of the packet
bundle. This will work fine for non-cloned packets.
However, for cloned packets, when the gro-ed packet is
eventually freed (because the original skb was not cloned and
hence reference was 1), the merged skb's frags also get freed
(put_page-ed) without taking into account the other references
that were held for the fragments (dataref). This will result in
bad page problems.
Hence, avoid GRO for cloned packets.
Change-Id: I867dc6eac82e1e bc7a0f496b928d6 6ff62409542
Closes-Bug: #1683305