net: fix sk_buff head without data area
authorPablo Neira <pablo@netfilter.org>
Mon, 3 Jun 2013 09:28:43 +0000 (09:28 +0000)
committerDavid S. Miller <davem@davemloft.net>
Wed, 5 Jun 2013 00:26:49 +0000 (17:26 -0700)
commit5e71d9d77c07fa7d4c42287a177f7b738d0cd4b9
tree143f0f3ea5dbebf7bee5e326c73002f36d87dbb3
parent9bc297ea0622bb2a6b3abfa2fa84f0a3b86ef8c8
net: fix sk_buff head without data area

Eric Dumazet spotted that we have to check skb->head instead
of skb->data as skb->head points to the beginning of the
data area of the skbuff. Similarly, we have to initialize the
skb->head pointer, not skb->data in __alloc_skb_head.

After this fix, netlink crashes in the release path of the
sk_buff, so let's fix that as well.

This bug was introduced in (0ebd0ac net: add function to
allocate sk_buff head without data area).

Reported-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/core/skbuff.c
net/netlink/af_netlink.c