diff options
| author | Vlad Yasevich <vladislav.yasevich@hp.com> | 2008-02-05 20:23:44 +0100 |
|---|---|---|
| committer | Vlad Yasevich <vladislav.yasevich@hp.com> | 2008-02-07 03:27:39 +0100 |
| commit | 5f9646c3d9f92a93b96c40e65c3d268baada842f (patch) | |
| tree | 94f9e6c62bbcd6ebc7d87783612b8652054d0071 /net/sctp/outqueue.c | |
| parent | [SCTP]: Fix kernel panic while received ASCONF chunk with bad serial number (diff) | |
| download | linux-5f9646c3d9f92a93b96c40e65c3d268baada842f.tar.xz linux-5f9646c3d9f92a93b96c40e65c3d268baada842f.zip | |
[SCTP]: Make sure the chunk is off the transmitted list prior to freeing.
In a few instances, we need to remove the chunk from the transmitted list
prior to freeing it. This is because the free code doesn't do that any
more and so we need to do it manually.
Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
Diffstat (limited to 'net/sctp/outqueue.c')
| -rw-r--r-- | net/sctp/outqueue.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/net/sctp/outqueue.c b/net/sctp/outqueue.c index 3c2a281347e1..1bb3c5c35d2a 100644 --- a/net/sctp/outqueue.c +++ b/net/sctp/outqueue.c @@ -1179,8 +1179,10 @@ int sctp_outq_sack(struct sctp_outq *q, struct sctp_sackhdr *sack) tchunk = list_entry(lchunk, struct sctp_chunk, transmitted_list); tsn = ntohl(tchunk->subh.data_hdr->tsn); - if (TSN_lte(tsn, ctsn)) + if (TSN_lte(tsn, ctsn)) { + list_del_init(&tchunk->transmitted_list); sctp_chunk_free(tchunk); + } } /* ii) Set rwnd equal to the newly received a_rwnd minus the |