---

yaml --- r: 65167 b: refs/heads/master c: a09c838 h: refs/heads/master i: 65165: 0d25f1b 65163: 22ae673 65159: 44481f4 65151: 3036583 v: v3
git-mirror · Sep 26, 2007 · 81e49bf · 81e49bf
1 parent 93d421e
commit 81e49bf
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/[refs] b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: ca9938fea576ebbb8d8c4fbe8a5bcc937e49e1ca
+refs/heads/master: a09c83847b664dcd67a72613374061c900afb799
diff --git a/trunk/net/sctp/inqueue.c b/trunk/net/sctp/inqueue.c
@@ -130,6 +130,14 @@ struct sctp_chunk *sctp_inq_pop(struct sctp_inq *queue)
 			/* Force chunk->skb->data to chunk->chunk_end.  */
 			skb_pull(chunk->skb,
 				 chunk->chunk_end - chunk->skb->data);
+
+			/* Verify that we have at least chunk headers
+			 * worth of buffer left.
+			 */
+			if (skb_headlen(chunk->skb) < sizeof(sctp_chunkhdr_t)) {
+				sctp_chunk_free(chunk);
+				chunk = queue->in_progress = NULL;
+			}
 		}
 	}