[PATCH net v3 0/2] Guard against gso_segs overflows

[Alice Mikityanska <alice.kernel@fastmail.im>]

From: Alice Mikityanska <alice@isovalent.com>

This series is a follow-up on the discussion:

https://lore.kernel.org/netdev/CAD0BsJWzSr2zduf5v3mVC4zd=Lj6ZAoC+V42-VBdg42aDY8XXw@mail.gmail.com/T/#m1e22fca273c36cc8844e516505d3251cc1418fea

skb_segment is patched to avoid possible overflows in partial GSO. The
primary possible source of too many GSO segments is also addressed:
virtio-net clamps gso_size to >=8 in TCP, as suggested by Eric.

v3 changes: Reordered the patches, added WARN to skb_segment.

v2: https://lore.kernel.org/netdev/20260813174613.2920246-1-alice.kernel@fastmail.im/

v2 changes: dropped new checks in fastpath from skb_gro_receive and
__virtio_net_hdr_to_skb, replaced the latter with a silent clamp for
gso_size, kept the cheap guard in skb_segment.

v1: https://lore.kernel.org/netdev/20260723155145.158572-1-alice.kernel@fastmail.im/

Alice Mikityanska (2):
  virtio-net: Ensure that TCP packets don't overflow gso_segs
  net: Guard for gso_segs overflow in skb_segment

 include/linux/virtio_net.h | 4 ++++
 net/core/skbuff.c          | 3 ++-
 2 files changed, 6 insertions(+), 1 deletion(-)

-- 
2.55.0