mirror of
https://gitee.com/bianbu-linux/linux-6.6
synced 2025-04-24 14:07:52 -04:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
commit
3e3ab9ccca
28 changed files with 346 additions and 220 deletions
|
@ -48,11 +48,19 @@ static void tcp_write_err(struct sock *sk)
|
|||
* to prevent DoS attacks. It is called when a retransmission timeout
|
||||
* or zero probe timeout occurs on orphaned socket.
|
||||
*
|
||||
* Also close if our net namespace is exiting; in that case there is no
|
||||
* hope of ever communicating again since all netns interfaces are already
|
||||
* down (or about to be down), and we need to release our dst references,
|
||||
* which have been moved to the netns loopback interface, so the namespace
|
||||
* can finish exiting. This condition is only possible if we are a kernel
|
||||
* socket, as those do not hold references to the namespace.
|
||||
*
|
||||
* Criteria is still not confirmed experimentally and may change.
|
||||
* We kill the socket, if:
|
||||
* 1. If number of orphaned sockets exceeds an administratively configured
|
||||
* limit.
|
||||
* 2. If we have strong memory pressure.
|
||||
* 3. If our net namespace is exiting.
|
||||
*/
|
||||
static int tcp_out_of_resources(struct sock *sk, bool do_reset)
|
||||
{
|
||||
|
@ -81,6 +89,13 @@ static int tcp_out_of_resources(struct sock *sk, bool do_reset)
|
|||
__NET_INC_STATS(sock_net(sk), LINUX_MIB_TCPABORTONMEMORY);
|
||||
return 1;
|
||||
}
|
||||
|
||||
if (!check_net(sock_net(sk))) {
|
||||
/* Not possible to send reset; just close */
|
||||
tcp_done(sk);
|
||||
return 1;
|
||||
}
|
||||
|
||||
return 0;
|
||||
}
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue