OSDN Git Service
(root)
/
sagit-ice-cold
/
kernel_xiaomi_msm8998.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
cc9a06c
)
[TCP]: tcp_highspeed: fix AIMD table out-of-bounds access
author
Patrick McHardy
<kaber@trash.net>
Mon, 13 Mar 2006 04:34:53 +0000
(20:34 -0800)
committer
David S. Miller
<davem@sunset.davemloft.net>
Mon, 13 Mar 2006 04:39:39 +0000
(20:39 -0800)
Covertiy #547
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/tcp_highspeed.c
patch
|
blob
|
history
diff --git
a/net/ipv4/tcp_highspeed.c
b/net/ipv4/tcp_highspeed.c
index
63cf7e5
..
e0e9d13
100644
(file)
--- a/
net/ipv4/tcp_highspeed.c
+++ b/
net/ipv4/tcp_highspeed.c
@@
-125,7
+125,7
@@
static void hstcp_cong_avoid(struct sock *sk, u32 adk, u32 rtt,
/* Update AIMD parameters */
if (tp->snd_cwnd > hstcp_aimd_vals[ca->ai].cwnd) {
while (tp->snd_cwnd > hstcp_aimd_vals[ca->ai].cwnd &&
- ca->ai < HSTCP_AIMD_MAX)
+ ca->ai < HSTCP_AIMD_MAX
- 1
)
ca->ai++;
} else if (tp->snd_cwnd < hstcp_aimd_vals[ca->ai].cwnd) {
while (tp->snd_cwnd > hstcp_aimd_vals[ca->ai].cwnd &&