]> git.baikalelectronics.ru Git - kernel.git/commit
tipc: fix potential bug in function tipc_backlog_rcv
authorJon Paul Maloy <jon.maloy@ericsson.com>
Mon, 9 Jun 2014 16:08:18 +0000 (11:08 -0500)
committerDavid S. Miller <davem@davemloft.net>
Wed, 11 Jun 2014 22:01:30 +0000 (15:01 -0700)
commitae7559f01a818f186e6b452e11c7ac6fc92ca628
tree5d095614085cc212ed347df4e996fc376f308a90
parentd22856559ff467f189f57d1303af9d0b970d9c33
tipc: fix potential bug in function tipc_backlog_rcv

In commit 69f665ce78baf4228d4655eb6d69927ccebbe997 ("tipc: compensate
for double accounting in socket rcv buffer") we access 'truesize' of
a received buffer after it might have been released by the function
filter_rcv().

In this commit we correct this by reading the value of 'truesize' to
the stack before delivering the buffer to filter_rcv().

Signed-off-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/tipc/socket.c