| commit | abbee2effcbce55440accb0a1dd315562875efa2 | |
| author | alex.bluesman.smirnov@gmail.com <alex.bluesman.smirnov@gmail.com> | |
| Tue, 10 Jul 2012 21:22:47 +0000 (10 21:22 +0000) | ||
| committer | David S. Miller <davem@davemloft.net> | |
| Thu, 12 Jul 2012 14:54:45 +0000 (12 07:54 -0700) | ||
| tree | bde2b4f68318aa1624757e10a548d3f33518bc46 | treesnapshot (tar.gz zip) |
| parent | 428840424fc54dd2d3f67d3de8b78bb71a479537 | commitdiff |
6lowpan: fix tag variable size
Function lowpan_alloc_new_frame() takes u8 tag as an argument. However,
its only caller, lowpan_process_data() passes down a u16. Hence,
the tag value can get corrupted. This prevent 6lowpan fragment reassembly of a
message when the fragment tag value is over 256.
Signed-off-by: Alexander Smirnov <alex.bluesman.smirnov@gmail.com>
Cc: Tony Cheneau <tony.cheneau@amnesiak.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Function lowpan_alloc_new_frame() takes u8 tag as an argument. However,
its only caller, lowpan_process_data() passes down a u16. Hence,
the tag value can get corrupted. This prevent 6lowpan fragment reassembly of a
message when the fragment tag value is over 256.
Signed-off-by: Alexander Smirnov <alex.bluesman.smirnov@gmail.com>
Cc: Tony Cheneau <tony.cheneau@amnesiak.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
| net/ieee802154/6lowpan.c | diffblobblamehistory |