From: Eric Dumazet <edumazet@google.com>
Date: Wed, 2 May 2012 07:55:58 +0000 (+0000)
Subject: net: take care of cloned skbs in tcp_try_coalesce()
X-Git-Tag: v3.5-rc1~109^2~190
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=923dd347b8904c24bcac89bf038ed4da87f8aa90;p=pandora-kernel.git

net: take care of cloned skbs in tcp_try_coalesce()

Before stealing fragments or skb head, we must make sure skbs are not
cloned.

Alexander was worried about destination skb being cloned : In bridge
setups, a driver could be fooled if skb->data_len would not match skb
nr_frags.

If source skb is cloned, we must take references on pages instead.

Bug happened using tcpdump (if not using mmap())

Introduce kfree_skb_partial() helper to cleanup code.

Reported-by: Alexander Duyck <alexander.h.duyck@intel.com>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
---

Reading git-diff-tree failed