Re: [PATCH net v2] ipv6: seg6: clear IPv4 control block in End.DT4
Nicolas Dichtel <[email protected]>
| Newsgroups | org.kernel.vger.netdev,org.kernel.vger.linux-kernel |
|---|---|
| Organization | 6WIND |
| Message-ID | <[email protected]> |
Le 05/08/2026 à 12:17, David Lee a écrit : > Hi Nicoals, Hi, please avoid top-posting ;-) https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/Documentation/process/submitting-patches.rst#n336 > > You were right. I tested End.DX4 separately on the 62cc90241548 (v7.2-rc5) > kernel and it produced: > > BUG: KASAN: slab-out-of-bounds in __ip_options_echo() > Write of size 255 > > The stack contains both input_action_end_dx4_finish() and > input_action_end_dx4(). A matched bounded control traversed End.DX4, > reached SYN_RECV, and produced no kernel diagnostic. > > Therefore, End.DX4 has the same stale IP6CB-to-IPCB issue. The current > patch only clears IPCB in End.DT4 and is incomplete. > > Do you prefer v3 to be sent out to cover this case too? Yes, it would be nice to fix both in the same time. Regards, Nicolas