| commit | 4bdab43323b459900578b200a4b8cf9713ac8fab | |
| author | Vlad Yasevich <vladislav.yasevich@hp.com> | |
| Wed, 15 Sep 2010 14:00:26 +0000 (15 10:00 -0400) | ||
| committer | David S. Miller <davem@davemloft.net> | |
| Fri, 17 Sep 2010 23:47:56 +0000 (17 16:47 -0700) | ||
| tree | 7a732994407ebb88698845ee36dbf98c062af49e | treesnapshot (tar.gz zip) |
| parent | 2507136f74f70a4869bd4f525d48715ae66db43d | commitdiff |
sctp: Do not reset the packet during sctp_packet_config().
sctp_packet_config() is called when getting the packet ready
for appending of chunks. The function should not touch the
current state, since it's possible to ping-pong between two
transports when sending, and that can result packet corruption
followed by skb overlfow crash.
Reported-by: Thomas Dreibholz <dreibh@iem.uni-due.de>
Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
sctp_packet_config() is called when getting the packet ready
for appending of chunks. The function should not touch the
current state, since it's possible to ping-pong between two
transports when sending, and that can result packet corruption
followed by skb overlfow crash.
Reported-by: Thomas Dreibholz <dreibh@iem.uni-due.de>
Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
| net/sctp/output.c | diffblobblamehistory |