diff options
| author | Jon Paul Maloy <jon.maloy@ericsson.com> | 2014-07-05 13:44:13 -0400 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2014-07-08 15:55:09 -0700 |
| commit | 29322d0db98e5a84f5cc6a55655bee3dc4ffb5ab (patch) | |
| tree | d25dfe81b741b6a8757ff1eea5143b1c3a801e7c /ipc/namespace.c | |
| parent | b6e195fd4f663a7a97183feddb4ec27f0a5a00ec (diff) | |
tipc: fix bug in multicast/broadcast message reassembly
Since commit 37e22164a8a3c39bdad45aa463b1e69a1fdf4110 ("tipc: rename and
move message reassembly function") reassembly of long broadcast messages
has been broken. This is because we test for a non-NULL return value
of the *buf parameter as criteria for succesful reassembly. However, this
parameter is left defined even after reception of the first fragment,
when reassebly is still incomplete. This leads to a kernel crash as soon
as a the first fragment of a long broadcast message is received.
We fix this with this commit, by implementing a stricter behavior of the
function and its return values.
This commit should be applied to both net and net-next.
Signed-off-by: Jon Maloy <jon.maloy@ericsson.com>
Acked-by: Ying Xue <ying.xue@windriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'ipc/namespace.c')
0 files changed, 0 insertions, 0 deletions