From fe322ded19995ba484997c81993bfdb87e8f689e Mon Sep 17 00:00:00 2001
From: "Michael S. Tsirkin" <mst@redhat.com>
Date: Sun, 23 Jun 2013 17:26:58 +0300
Subject: [PATCH] --- yaml --- r: 377444 b: refs/heads/master c:
 4c7ab054ab4f5d63625508ed6f8a607184cae7c2 h: refs/heads/master v: v3

---
 [refs]                      | 2 +-
 trunk/drivers/net/macvtap.c | 6 ++++--
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/[refs] b/[refs]
index 77426d17dabf..12a4cd5787ba 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 7e24bfbe43b545b1689a5f134ed83645b9e34b86
+refs/heads/master: 4c7ab054ab4f5d63625508ed6f8a607184cae7c2
diff --git a/trunk/drivers/net/macvtap.c b/trunk/drivers/net/macvtap.c
index 59e9605de316..b6dd6a75919a 100644
--- a/trunk/drivers/net/macvtap.c
+++ b/trunk/drivers/net/macvtap.c
@@ -524,8 +524,10 @@ static int zerocopy_sg_from_iovec(struct sk_buff *skb, const struct iovec *from,
 			return -EMSGSIZE;
 		num_pages = get_user_pages_fast(base, size, 0, &page[i]);
 		if (num_pages != size) {
-			for (i = 0; i < num_pages; i++)
-				put_page(page[i]);
+			int j;
+
+			for (j = 0; j < num_pages; j++)
+				put_page(page[i + j]);
 			return -EFAULT;
 		}
 		truesize = size * PAGE_SIZE;