linux-stable/net/rxrpc
David Howells 74bb4de32d rxrpc: Fix transmission of an abort in response to an abort
[ Upstream commit e9c0b96ec0 ]

Under some circumstances, such as when a server socket is closing, ABORT
packets will be generated in response to incoming packets.  Unfortunately,
this also may include generating aborts in response to incoming aborts -
which may cause a cycle.  It appears this may be made possible by giving
the client a multicast address.

Fix this such that rxrpc_reject_packet() will refuse to generate aborts in
response to aborts.

Fixes: 248f219cb8 ("rxrpc: Rewrite the data and ack handling code")
Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: Jeffrey Altman <jaltman@auristor.com>
cc: Marc Dionne <marc.dionne@auristor.com>
cc: Junvyyang, Tencent Zhuque Lab <zhuque@tencent.com>
cc: LePremierHomme <kwqcheii@proton.me>
cc: Linus Torvalds <torvalds@linux-foundation.org>
cc: Simon Horman <horms@kernel.org>
cc: linux-afs@lists.infradead.org
Link: https://patch.msgid.link/20250717074350.3767366-5-dhowells@redhat.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-07-24 08:53:20 +02:00
..
af_rxrpc.c
ar-internal.h
call_accept.c rxrpc: Fix recv-recv race of completed call 2025-07-24 08:53:20 +02:00
call_event.c
call_object.c
call_state.c
conn_client.c
conn_event.c
conn_object.c
conn_service.c
input.c
insecure.c
io_thread.c
Kconfig
key.c
local_event.c
local_object.c
Makefile
misc.c
net_ns.c
output.c rxrpc: Fix transmission of an abort in response to an abort 2025-07-24 08:53:20 +02:00
peer_event.c
peer_object.c
proc.c
protocol.h
recvmsg.c rxrpc: Fix recv-recv race of completed call 2025-07-24 08:53:20 +02:00
rtt.c
rxkad.c
rxperf.c
security.c
sendmsg.c
server_key.c
skbuff.c
sysctl.c
txbuf.c
utils.c