From: Jon Paul Maloy <jon.maloy@ericsson.com>
Date: Mon, 9 Jun 2014 16:08:18 +0000 (-0500)
Subject: tipc: fix potential bug in function tipc_backlog_rcv
X-Git-Tag: omap-for-v3.16/fixes-against-rc1~36^2~30
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=02c00c2ab0807ec64b480e899d2619e64566a0af;p=pandora-kernel.git

tipc: fix potential bug in function tipc_backlog_rcv

In commit 4f4482dcd9a0606a30541ff165ddaca64748299b ("tipc: compensate
for double accounting in socket rcv buffer") we access 'truesize' of
a received buffer after it might have been released by the function
filter_rcv().

In this commit we correct this by reading the value of 'truesize' to
the stack before delivering the buffer to filter_rcv().

Signed-off-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
---

Reading git-diff-tree failed