From ec2b0607069db8052bcbc50bdcc361dc29d82694 Mon Sep 17 00:00:00 2001
From: Herbert Xu <herbert@gondor.apana.org.au>
Date: Wed, 7 Apr 2010 21:20:47 -0700
Subject: [PATCH] --- yaml --- r: 189850 b: refs/heads/master c:
 fd218cf9557b9bf7061365a8fe7020a56d3f767c h: refs/heads/master v: v3

---
 [refs]                          | 2 +-
 trunk/net/bridge/br_multicast.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/[refs] b/[refs]
index 47b5ccbd5659..b6a247a35609 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 94824f3dbe0d3f62470603bbb18efb5510aaf07c
+refs/heads/master: fd218cf9557b9bf7061365a8fe7020a56d3f767c
diff --git a/trunk/net/bridge/br_multicast.c b/trunk/net/bridge/br_multicast.c
index 6980625537ca..f29ada827a6a 100644
--- a/trunk/net/bridge/br_multicast.c
+++ b/trunk/net/bridge/br_multicast.c
@@ -723,7 +723,7 @@ static int br_multicast_igmp3_report(struct net_bridge *br,
 		if (!pskb_may_pull(skb, len))
 			return -EINVAL;
 
-		grec = (void *)(skb->data + len);
+		grec = (void *)(skb->data + len - sizeof(*grec));
 		group = grec->grec_mca;
 		type = grec->grec_type;