Re: [PATCH net v2] ipv6: seg6: clear IPv4 control block in End.DT4

[Nicolas Dichtel]

Le 05/08/2026 à 12:17, David Lee a écrit :
> Hi Nicoals,
Hi,

please avoid top-posting ;-)
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/Documentation/process/submitting-patches.rst#n336
> 
> You were right. I tested End.DX4 separately on the 62cc90241548 (v7.2-rc5)
> kernel and it produced:
> 
> BUG: KASAN: slab-out-of-bounds in __ip_options_echo()
> Write of size 255
> 
> The stack contains both input_action_end_dx4_finish() and
> input_action_end_dx4(). A matched bounded control traversed End.DX4,
> reached SYN_RECV, and produced no kernel diagnostic.
> 
>  Therefore, End.DX4 has the same stale IP6CB-to-IPCB issue. The current
>  patch only clears IPCB in End.DT4 and is incomplete.
> 
> Do you prefer v3 to be sent out to cover this case too?
Yes, it would be nice to fix both in the same time.

Regards,
Nicolas