net: tcp: fix crashes trying to free half-baked MTU probes
authorJakub Kicinski <kuba@kernel.org>
Tue, 10 Oct 2023 17:36:51 +0000 (10:36 -0700)
committerJakub Kicinski <kuba@kernel.org>
Thu, 12 Oct 2023 00:24:46 +0000 (17:24 -0700)
commit71c299c711d1f44f0bf04f1fea66baad565240f1
tree700a909d805b731d7e107a8ee6b2a5e2ed25a9c4
parent8bcfc9ded21c1b8831636ea687db923feba0faf5
net: tcp: fix crashes trying to free half-baked MTU probes

tcp_stream_alloc_skb() initializes the skb to use tcp_tsorted_anchor
which is a union with the destructor. We need to clean that
TCP-iness up before freeing.

Fixes: 736013292e3c ("tcp: let tcp_mtu_probe() build headless packets")
Reviewed-by: Eric Dumazet <edumazet@google.com>
Link: https://lore.kernel.org/r/20231010173651.3990234-1-kuba@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
net/ipv4/tcp_output.c