Problem s CPU

[Pavel Kankovsky]

On Wed, 22 Apr 1998, Petr Blaha wrote:

> Apr 21 21:45:57 penguin kernel: Warning: kfree_skb passed an skb still
> on a list (from 0049baf4). 

Takova hlaska je sympomaticka pro utok zvany "nestea" (cili posilani
jaksi podivne fragmentovanych datagramu). Pokud je pocitac pripojen
k siti (pocitacove, k te elektricke asi pripojen bude :> ), tak to asi
bude ono. Pak doporucuji aktualizovat kernel na 2.0.34pre10 resp.
aplikovat patch (viz nize).

--Pavel Kankovsky aka Peak   [ Boycott Microsoft -- http://www.vcnet.com/bms ]


patch od Alana Coxe

--- ip_fragment.c.old   Thu Apr 16 12:25:34 1998
+++ ip_fragment.c       Thu Apr 16 12:29:02 1998
@@ -375,7 +375,7 @@
        fp = qp->fragments;
        while(fp != NULL)
        {
-               if (fp->len < 0 || count+fp->len > skb->len)
+               if (fp->len < 0 || fp->offset+qp->ihlen+fp->len > skb->len)
                {
                        NETDEBUG(printk("Invalid fragment list: Fragment over size.\n"));
                        ip_free(qp);