| commit | aa8673599f1d269b4e4d9b0c0f61fca57bc02699 | |
| author | David S. Miller <davem@davemloft.net> | |
| Tue, 12 Apr 2011 01:59:05 +0000 (11 18:59 -0700) | ||
| committer | David S. Miller <davem@davemloft.net> | |
| Tue, 12 Apr 2011 01:59:05 +0000 (11 18:59 -0700) | ||
| tree | 7733bac39d382cfcda0459e8973decb300a0c52a | treesnapshot (tar.gz zip) |
| parent | 4a9f65f6304a00f6473e83b19c1e83caa1e42530 | commitdiff |
llc: Fix length check in llc_fixup_skb().
Fixes bugzilla #32872
The LLC stack pretends to support non-linear skbs but there is a
direct use of skb_tail_pointer() in llc_fixup_skb().
Use pskb_may_pull() to see if data_size bytes remain and can be
accessed linearly in the packet, instead of direct pointer checks.
Signed-off-by: David S. Miller <davem@davemloft.net>
Fixes bugzilla #32872
The LLC stack pretends to support non-linear skbs but there is a
direct use of skb_tail_pointer() in llc_fixup_skb().
Use pskb_may_pull() to see if data_size bytes remain and can be
accessed linearly in the packet, instead of direct pointer checks.
Signed-off-by: David S. Miller <davem@davemloft.net>
| net/llc/llc_input.c | diffblobblamehistory |