Re: [PATCH net v5] tipc: fix u16 MTU truncation in media and bearer MTU validation
From: patchwork-bot+netdevbpf
Date: Thu Jul 23 2026 - 06:05:14 EST
Hello:
This patch was applied to netdev/net.git (main)
by Paolo Abeni <pabeni@xxxxxxxxxx>:
On Tue, 14 Jul 2026 00:15:41 -0400 you wrote:
> Both TIPC_NL_MEDIA_SET and TIPC_NL_BEARER_SET accept user-supplied
> MTU values but only enforce a minimum bound, not a maximum. When a user
> sets the MTU to a value exceeding U16_MAX (65535), it passes validation
> but is silently truncated when assigned to u16 fields l->mtu and
> l->advertised_mtu in tipc_link_create(). Values like 65536 (0x10000)
> truncate to 0, causing a division by zero in tipc_link_set_queue_limits()
> which computes TIPC_MAX_PUBL / (l->mtu / ITEM_SIZE). Other overflowing
> values (e.g. 65537-131071) produce small incorrect MTU values, resulting
> in link malfunction behaviors.
>
> [...]
Here is the summary with links:
- [net,v5] tipc: fix u16 MTU truncation in media and bearer MTU validation
https://git.kernel.org/netdev/net/c/9f29cd8a8e79
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html