Thread (2 messages) flat view 2 messages, 2 authors, 1d ago

Re: [PATCH net v2] ipv6: seg6: clear IPv4 control block in End.DT4

From: Nicolas Dichtel <hidden>
Date: 2026-08-05 11:58:25
Also in: lkml

Le 05/08/2026 à 12:17, David Lee a écrit :
Hi Nicoals,
Hi,

please avoid top-posting ;-)
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/Documentation/process/submitting-patches.rst#n336
You were right. I tested End.DX4 separately on the 62cc90241548 (v7.2-rc5)
kernel and it produced:

BUG: KASAN: slab-out-of-bounds in __ip_options_echo()
Write of size 255

The stack contains both input_action_end_dx4_finish() and
input_action_end_dx4(). A matched bounded control traversed End.DX4,
reached SYN_RECV, and produced no kernel diagnostic.

 Therefore, End.DX4 has the same stale IP6CB-to-IPCB issue. The current
 patch only clears IPCB in End.DT4 and is incomplete.

Do you prefer v3 to be sent out to cover this case too?
Yes, it would be nice to fix both in the same time.

Regards,
Nicolas
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help