> [Severity: Medium] > Can a peer keep this goto retry loop running for as long as it likes?
Yes, as it can in tls_sw_recvmsg(). This series leaves both unbounded: the reader runs in its own syscall context, and a budget exit returns zero, which is the false EOF this patch fixes. See my reply on patch 2. In the v4 repost, nonblocking splice with a signal pending will get -EAGAIN rather than -EINTR. -- Chuck Lever (Come to NFS bake-a-thon! https://nfsv4bat.org)
