linux arm64平台上协议栈发包报文长度溢出导致系统挂死举例
挂死日志
skbuff: skb_over_panic: text:ffffffffa01ea1c3 len:31056 put:30768 head:ffff88011bd81800 data:ffff88011bd81800 tail:0x7950 end:0x440 dev:<NULL>
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:129!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 3 PID: 3480 Comm: mausezahn Not tainted 5.4.0-rc7 torvalds#108
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-2.fc30 04/01/2014
RIP: 0010:skb_panic+0x79/0x7b
Call Trace:<IRQ>skb_put+0x5c/0x70sctp_addto_chunk+0x63/0xd0 [sctp]sctp_process_asconf+0x1af/0x540 [sctp]sctp_sf_do_asconf+0x168/0x240 [sctp]sctp_do_sm+0x71/0x1210 [sctp]sctp_assoc_bh_rcv+0xd3/0x180 [sctp]sctp_rcv+0x982/0xa10 [sctp]ip_local_deliver_finish+0xdd/0x2d0ip_rcv+0x275/0x350netif_receive_skb+0x5