diff options
| author | Ursula Braun <ursula.braun@de.ibm.com> | 2013-04-08 00:19:26 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2013-04-08 23:16:57 +0200 |
| commit | f9c41a62bba3f3f7ef3541b2a025e3371bcbba97 (patch) | |
| tree | 39aa5a3b8a584cff0d1974e60d22015a26d04e41 /include | |
| parent | rtnetlink: Call nlmsg_parse() with correct header length (diff) | |
| download | linux-f9c41a62bba3f3f7ef3541b2a025e3371bcbba97.tar.xz linux-f9c41a62bba3f3f7ef3541b2a025e3371bcbba97.zip | |
af_iucv: fix recvmsg by replacing skb_pull() function
When receiving data messages, the "BUG_ON(skb->len < skb->data_len)" in
the skb_pull() function triggers a kernel panic.
Replace the skb_pull logic by a per skb offset as advised by
Eric Dumazet.
Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
Signed-off-by: Frank Blaschka <blaschka@linux.vnet.ibm.com>
Reviewed-by: Hendrik Brueckner <brueckner@linux.vnet.ibm.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include')
| -rw-r--r-- | include/net/iucv/af_iucv.h | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/include/net/iucv/af_iucv.h b/include/net/iucv/af_iucv.h index cc7c19732389..714cc9a54a4c 100644 --- a/include/net/iucv/af_iucv.h +++ b/include/net/iucv/af_iucv.h @@ -130,6 +130,14 @@ struct iucv_sock { enum iucv_tx_notify n); }; +struct iucv_skb_cb { + u32 class; /* target class of message */ + u32 tag; /* tag associated with message */ + u32 offset; /* offset for skb receival */ +}; + +#define IUCV_SKB_CB(__skb) ((struct iucv_skb_cb *)&((__skb)->cb[0])) + /* iucv socket options (SOL_IUCV) */ #define SO_IPRMDATA_MSG 0x0080 /* send/recv IPRM_DATA msgs */ #define SO_MSGLIMIT 0x1000 /* get/set IUCV MSGLIMIT */ |