From e46b64e725287ba7a0027dfbe8caaf50894521e1 Mon Sep 17 00:00:00 2001
From: Antonio Quartulli <ordex@autistici.org>
Date: Tue, 19 Jun 2012 09:26:39 +0000
Subject: [PATCH] --- yaml --- r: 311386 b: refs/heads/master c:
 2c995ff892313009e336ecc8ec3411022f5b1c39 h: refs/heads/master v: v3

---
 [refs]                         | 2 +-
 trunk/net/batman-adv/routing.c | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/[refs] b/[refs]
index e3f21e204e7e..17305fa00e72 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 48d7d0ad9022b36be9fd8a236fb58ad4c0f3b80c
+refs/heads/master: 2c995ff892313009e336ecc8ec3411022f5b1c39
diff --git a/trunk/net/batman-adv/routing.c b/trunk/net/batman-adv/routing.c
index 840e2c64a301..015471d801b4 100644
--- a/trunk/net/batman-adv/routing.c
+++ b/trunk/net/batman-adv/routing.c
@@ -617,6 +617,8 @@ int recv_tt_query(struct sk_buff *skb, struct hard_iface *recv_if)
 			 * changes */
 			if (skb_linearize(skb) < 0)
 				goto out;
+			/* skb_linearize() possibly changed skb->data */
+			tt_query = (struct tt_query_packet *)skb->data;
 
 			tt_len = tt_query->tt_data * sizeof(struct tt_change);