[SNAP]: Check packet length before reading
authorHerbert Xu <herbert@gondor.apana.org.au>
Tue, 21 Aug 2007 07:06:37 +0000 (00:06 -0700)
committerDavid S. Miller <davem@sunset.davemloft.net>
Wed, 22 Aug 2007 03:58:13 +0000 (20:58 -0700)
The snap_rcv code reads 5 bytes so we should make sure that
we have 5 bytes in the head before proceeding.

Based on diagnosis and fix by Evgeniy Polyakov, reported by
Alan J. Wylie.

Patch also kills the skb->sk assignment before kfree_skb
since it's redundant.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>

No differences found