diff options
author | J. Bruce Fields <bfields@redhat.com> | 2013-06-26 11:09:06 -0400 |
---|---|---|
committer | J. Bruce Fields <bfields@redhat.com> | 2013-07-01 17:32:04 -0400 |
commit | cf3aa02cb4a0c5af5557dd47f15a08a7df33182a (patch) | |
tree | 54995388695e95c0abed33d68171ca160c5bfd2d /net/802/stp.c | |
parent | 590b743143eae8db40abdfd1ab20bc51ee0ee5db (diff) | |
download | talos-op-linux-cf3aa02cb4a0c5af5557dd47f15a08a7df33182a.tar.gz talos-op-linux-cf3aa02cb4a0c5af5557dd47f15a08a7df33182a.zip |
svcrpc: fix handling of too-short rpc's
If we detect that an rpc is too short, we abort and close the
connection. Except, there's a bug here: we're leaving sk_datalen
nonzero without leaving any pages in the sk_pages array. The most
likely result of the inconsistency is a subsequent crash in
svc_tcp_clear_pages.
Also demote the BUG_ON in svc_tcp_clear_pages to a WARN.
Cc: stable@kernel.org
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
Diffstat (limited to 'net/802/stp.c')
0 files changed, 0 insertions, 0 deletions