Jon Paul Maloy 02c00c2ab0 tipc: fix potential bug in function tipc_backlog_rcv ...

In commit 4f4482dcd9 ("tipc: compensate
for double accounting in socket rcv buffer") we access 'truesize' of
a received buffer after it might have been released by the function
filter_rcv().

In this commit we correct this by reading the value of 'truesize' to
the stack before delivering the buffer to filter_rcv().

Signed-off-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2014-06-11 15:01:30 -07:00

52 KiB

Raw Blame History

View Raw