tempesta
tempesta copied to clipboard
fix(2117): if si_wq is full, reset connection in case of flooding
close #2117 close #2149
The leak only occurs when si_wq is full and continues to process the current skb (which may contain the remaining SSL record), sk->sk_receive_queue, and possibly skbs that come in later. The leak is never triggered when we reset the connection and stop processing data immediately. Such a fix would be reasonable even without the leak since it is unlikely that si_wq will become full without flooding.