| commit | d92a7db710c32db826a00ba9bc7a22e741d5041e | [log] [tgz] |
|---|---|---|
| author | Herbert Xu <herbert@gondor.apana.org.au> | Tue Aug 21 00:06:37 2007 -0700 |
| committer | David S. Miller <davem@sunset.davemloft.net> | Tue Aug 21 20:58:13 2007 -0700 |
| tree | 800eeede84fea9ab9397b7a1a326629cf3c45bc8 | |
| parent | 39dad26c37fdb1382e4173172a2704fa278f7fd6 [diff] |
[SNAP]: Check packet length before reading The snap_rcv code reads 5 bytes so we should make sure that we have 5 bytes in the head before proceeding. Based on diagnosis and fix by Evgeniy Polyakov, reported by Alan J. Wylie. Patch also kills the skb->sk assignment before kfree_skb since it's redundant. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: David S. Miller <davem@davemloft.net>