From c3afccd890af051e139ef109b626f1d479b836fe Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ilpo=20J=C3=A4rvinen?= <ilpo.jarvinen@helsinki.fi>
Date: Fri, 1 Apr 2011 21:47:41 -0700
Subject: [PATCH] --- yaml --- r: 243710 b: refs/heads/master c:
 2fceec13375e5d98ef033c6b0ee03943fc460950 h: refs/heads/master v: v3

---
 [refs]                      | 2 +-
 trunk/net/ipv4/tcp_output.c | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/[refs] b/[refs]
index adc4d0654cf0..8125486b40a6 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 2cab86bee8e7f353e6ac8c15b3eb906643497644
+refs/heads/master: 2fceec13375e5d98ef033c6b0ee03943fc460950
diff --git a/trunk/net/ipv4/tcp_output.c b/trunk/net/ipv4/tcp_output.c
index dfa5beb0c1c8..8b0d0167e44a 100644
--- a/trunk/net/ipv4/tcp_output.c
+++ b/trunk/net/ipv4/tcp_output.c
@@ -1003,7 +1003,8 @@ int tcp_fragment(struct sock *sk, struct sk_buff *skb, u32 len,
 	int nlen;
 	u8 flags;
 
-	BUG_ON(len > skb->len);
+	if (WARN_ON(len > skb->len))
+		return -EINVAL;
 
 	nsize = skb_headlen(skb) - len;
 	if (nsize < 0)