Re: [PATCH net-next v2 5/5] net/sched: netem: handle multi-segment skb in corruption
From: Stephen Hemminger <stephen@networkplumber.org>
Date: 2026-05-05 00:25:41
On Sun, 3 May 2026 12:52:03 -0700 Stephen Hemminger [off-list ref] wrote:
The packet corruption code only flipped bits in the linear
header portion of the skb, skipping corruption when
skb_headlen() was zero.
Use skb_header_pointer() and skb_store_bits() to access the
full packet data, allowing any bit in the packet to be
corrupted regardless of how the skb is laid out.
Replaces d64cb81dcbd5 ("net/sched: sch_netem: fix out-of-bounds access
in packet corruption") with a more general solution.
Only count the number of packets that were actually corrupted.
Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
---There are problems with this since it doesn't handle zero copy correctly. Needs to make full copy.