tree 800eeede84fea9ab9397b7a1a326629cf3c45bc8
parent 39dad26c37fdb1382e4173172a2704fa278f7fd6
author Herbert Xu <herbert@gondor.apana.org.au> 1187679997 -0700
committer David S. Miller <davem@sunset.davemloft.net> 1187755093 -0700

[SNAP]: Check packet length before reading

The snap_rcv code reads 5 bytes so we should make sure that
we have 5 bytes in the head before proceeding.

Based on diagnosis and fix by Evgeniy Polyakov, reported by
Alan J. Wylie.

Patch also kills the skb->sk assignment before kfree_skb
since it's redundant.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>