Files
nebula/overlay
JackDoan 921ed4360a overlay/tio: validate WriteGSO geometry instead of silently dropping
The length checks were fishy on four counts: an empty hdr/transportHdr
with real payload returned nil (silent drop with a success signal); the
HdrLen/GSOSize/CsumStart uint16 conversions could wrap unchecked;
nothing verified transportHdr covers csum_start+csum_offset, so the
kernel's NEEDS_CSUM write could land in payload bytes; and there was no
total-size bound even though every length field involved is 16-bit.

Malformed geometry is now a real error, and a single 65535 total-length
guard makes all the u16 conversions exact.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-27 16:21:10 -05:00
..
2026-07-24 16:37:30 -05:00
2026-07-24 16:39:03 -05:00
2026-07-24 16:39:03 -05:00
2026-04-27 09:41:47 -05:00
2026-07-24 16:39:03 -05:00
2026-07-24 16:39:03 -05:00
2026-07-24 16:39:03 -05:00
2026-07-24 16:39:03 -05:00
2026-07-24 16:39:03 -05:00
2026-07-24 16:39:03 -05:00
2026-07-24 16:39:03 -05:00
2026-07-24 16:39:03 -05:00
2026-07-24 16:39:03 -05:00
2026-07-24 16:39:03 -05:00
2026-07-24 16:39:03 -05:00
2026-04-27 09:41:47 -05:00
2026-07-24 16:39:03 -05:00
2026-07-24 16:39:03 -05:00