Change Details

Skyzall came up with an interesting crash that has to do with sending both a SYN and FIN together. Turns out there were actually two problems. a) Not splitting the flags when you clone off a new rsm the right way (SYN should go to the left edge and FIN should go to the right) b) a KASSERT that did not properly account for this case i.e. no mbuf/no data.

syzcaller came up with an interesting crash that has to do with sending both a SYN and FIN together. Turns out there were actually two problems. 1. Not splitting the flags when you clone off a new rsm the right way (SYN should go to the left edge and FIN should go to the right) 2. a KASSERT that did not properly account for this case i.e. no mbuf/no data.

Skyzallsyzcaller came up with an interesting crash that has to do with sending both a SYN and FIN together. Turns out there were actually two problems. a)1. Not splitting the flags when you clone off a new rsm the right way (SYN should go to the left edge and FIN should go to the right) to the left edge and FIN should go to the right) b)2. a KASSERT that did not properly account for this case i.e. no mbuf/no data.