Yuchung Cheng b2b7af8611 tcp: fix NULL ref in tail loss probe
TCP loss probe timer may fire when the retranmission queue is empty but
has a non-zero tp->packets_out counter. tcp_send_loss_probe will call
tcp_rearm_rto which triggers NULL pointer reference by fetching the
retranmission queue head in its sub-routines.

Add a more detailed warning to help catch the root cause of the inflight
accounting inconsistency.

Reported-by: Rafael Tinoco <rafael.tinoco@linaro.org>
Signed-off-by: Yuchung Cheng <ycheng@google.com>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Neal Cardwell <ncardwell@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2018-12-05 16:34:40 -08:00
..
2018-04-23 10:21:24 -04:00
2018-11-24 17:42:57 -08:00
2018-07-24 14:10:43 -07:00
2018-10-31 08:54:16 -07:00
2018-02-28 11:43:28 -05:00
2018-10-05 11:52:38 -07:00
2018-10-31 08:54:16 -07:00
2013-05-31 17:19:05 -07:00