mirror of
https://github.com/torvalds/linux.git
synced 2024-12-29 06:12:08 +00:00
[TCP]: tcp_highspeed: fix AIMD table out-of-bounds access
Covertiy #547 Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
cc9a06cd8d
commit
4a1ff6e2bd
@ -125,7 +125,7 @@ static void hstcp_cong_avoid(struct sock *sk, u32 adk, u32 rtt,
|
|||||||
/* Update AIMD parameters */
|
/* Update AIMD parameters */
|
||||||
if (tp->snd_cwnd > hstcp_aimd_vals[ca->ai].cwnd) {
|
if (tp->snd_cwnd > hstcp_aimd_vals[ca->ai].cwnd) {
|
||||||
while (tp->snd_cwnd > hstcp_aimd_vals[ca->ai].cwnd &&
|
while (tp->snd_cwnd > hstcp_aimd_vals[ca->ai].cwnd &&
|
||||||
ca->ai < HSTCP_AIMD_MAX)
|
ca->ai < HSTCP_AIMD_MAX - 1)
|
||||||
ca->ai++;
|
ca->ai++;
|
||||||
} else if (tp->snd_cwnd < hstcp_aimd_vals[ca->ai].cwnd) {
|
} else if (tp->snd_cwnd < hstcp_aimd_vals[ca->ai].cwnd) {
|
||||||
while (tp->snd_cwnd > hstcp_aimd_vals[ca->ai].cwnd &&
|
while (tp->snd_cwnd > hstcp_aimd_vals[ca->ai].cwnd &&
|
||||||
|
Loading…
Reference in New Issue
Block a user