| commit | cf3aa02cb4a0c5af5557dd47f15a08a7df33182a | [log] [tgz] |
|---|---|---|
| author | J. Bruce Fields <bfields@redhat.com> | Wed Jun 26 11:09:06 2013 -0400 |
| committer | J. Bruce Fields <bfields@redhat.com> | Mon Jul 01 17:32:04 2013 -0400 |
| tree | 54995388695e95c0abed33d68171ca160c5bfd2d | |
| parent | 590b743143eae8db40abdfd1ab20bc51ee0ee5db [diff] |
svcrpc: fix handling of too-short rpc's If we detect that an rpc is too short, we abort and close the connection. Except, there's a bug here: we're leaving sk_datalen nonzero without leaving any pages in the sk_pages array. The most likely result of the inconsistency is a subsequent crash in svc_tcp_clear_pages. Also demote the BUG_ON in svc_tcp_clear_pages to a WARN. Cc: stable@kernel.org Signed-off-by: J. Bruce Fields <bfields@redhat.com>