tree 571ce21b27d55c155fbc3e4b981cfc3233939a09
parent 87fcd70d983d30eca4b933fff2e97d9a31743d0a
author Al Viro <viro@hera.kernel.org> 1165269909 +0000
committer Linus Torvalds <torvalds@woody.osdl.org> 1165289564 -0800

[PATCH] remote memory corruptor in ibmtr.c

ip_summed changes last summer had missed that one.  As the result,
we have ip_summed interpreted as CHECKSUM_PARTIAL now.  IOW,
->csum is interpreted as offset of checksum in the packet.  net/core/*
will both read and modify the value as that offset, with obvious
reasons.  At the very least it's a remote memory corruptor.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>