• David Howells's avatar
    rxrpc: Fix use of Don't Fragment flag · 87220143
    David Howells authored
    rxrpc normally has the Don't Fragment flag set on the UDP packets it
    transmits, except when it has decided that DATA packets aren't getting
    through - in which case it turns it off just for the DATA transmissions.
    This can be a problem, however, for RESPONSE packets that convey
    authentication and crypto data from the client to the server as ticket may
    be larger than can fit in the MTU.
    
    In such a case, rxrpc gets itself into an infinite loop as the sendmsg
    returns an error (EMSGSIZE), which causes rxkad_send_response() to return
    -EAGAIN - and the CHALLENGE packet is put back on the Rx queue to retry,
    leading to the I/O thread endlessly attempting to perform the transmission.
    
    Fix this by disabling DF on RESPONSE packets for now.  The use of DF and
    best data MTU determination needs reconsidering at some point in the
    future.
    
    Fixes: 17926a79 ("[AF_RXRPC]: Provide secure RxRPC sockets for use by userspace and kernel both")
    Reported-by: default avatarMarc Dionne <marc.dionne@auristor.com>
    Signed-off-by: default avatarDavid Howells <dhowells@redhat.com>
    cc: linux-afs@lists.infradead.org
    Acked-by: default avatarPaolo Abeni <pabeni@redhat.com>
    Link: https://lore.kernel.org/r/1581852.1704813048@warthog.procyon.org.ukSigned-off-by: default avatarJakub Kicinski <kuba@kernel.org>
    87220143
ar-internal.h 48.7 KB