From: J. Bruce Fields Date: Wed, 26 Jun 2013 15:09:06 +0000 (-0400) Subject: svcrpc: fix handling of too-short rpc's X-Git-Tag: v3.11-rc1~32^2~12 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cf3aa02cb4a0c5af5557dd47f15a08a7df33182a;p=pandora-kernel.git svcrpc: fix handling of too-short rpc's If we detect that an rpc is too short, we abort and close the connection. Except, there's a bug here: we're leaving sk_datalen nonzero without leaving any pages in the sk_pages array. The most likely result of the inconsistency is a subsequent crash in svc_tcp_clear_pages. Also demote the BUG_ON in svc_tcp_clear_pages to a WARN. Cc: stable@kernel.org Signed-off-by: J. Bruce Fields --- Reading git-diff-tree failed