diff options
| author | Jon Paul Maloy <jon.maloy@ericsson.com> | 2014-06-09 16:08:18 (GMT) |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2014-06-11 22:01:30 (GMT) |
| commit | 02c00c2ab0807ec64b480e899d2619e64566a0af (patch) | |
| tree | 5d095614085cc212ed347df4e996fc376f308a90 /lib/mpi | |
| parent | cf97b8ff22a0d8b81dead6baff551642c9ead8e7 (diff) | |
| download | linux-02c00c2ab0807ec64b480e899d2619e64566a0af.tar.xz | |
tipc: fix potential bug in function tipc_backlog_rcv
In commit 4f4482dcd9a0606a30541ff165ddaca64748299b ("tipc: compensate
for double accounting in socket rcv buffer") we access 'truesize' of
a received buffer after it might have been released by the function
filter_rcv().
In this commit we correct this by reading the value of 'truesize' to
the stack before delivering the buffer to filter_rcv().
Signed-off-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'lib/mpi')
0 files changed, 0 insertions, 0 deletions