[PATCH net-next 0/3] Guard against gso_segs overflows

[Alice Mikityanska <alice.kernel@fastmail.im>]

From: Alice Mikityanska <alice@isovalent.com>

This series is a follow-up on the discussion:

https://lore.kernel.org/netdev/CAD0BsJWzSr2zduf5v3mVC4zd=Lj6ZAoC+V42-VBdg42aDY8XXw@mail.gmail.com/T/#m1e22fca273c36cc8844e516505d3251cc1418fea

skb_segment is patched to avoid possible overflows in partial GSO. The
possible sources of too many GSO segments are also addressed:

- virtio-net blocks large packets (>64k) with extremely small (<8)
  gso_size.
- GRO aggregation checks the number of segments before extending the
  chain.

Feel free to drop patch 1 if you feel that patches 2 and 3 address all
possible cases, and extra robustness in skb_segment is not needed.

Alice Mikityanska (3):
  net: Guard for gso_segs overflow in skb_segment
  virtio-net: Block malformed packets that overflow gso_segs
  net: Limit to GSO_MAX_SEGS in skb_gro_receive

 include/linux/virtio_net.h | 4 ++++
 net/core/gro.c             | 3 +++
 net/core/skbuff.c          | 2 +-
 3 files changed, 8 insertions(+), 1 deletion(-)

-- 
2.55.0