[TIPC] Fixed sk_buff panic caused by tipc_link_bundle_buf (REVISED)
authorAllan Stephens <allan.stephens@windriver.com>
Tue, 4 Jul 2006 02:39:36 +0000 (19:39 -0700)
committerDavid S. Miller <davem@davemloft.net>
Tue, 4 Jul 2006 02:39:36 +0000 (19:39 -0700)
commit863fae666acb87b150f4634e6e79476ebe274f43
tree59b09c818b986972dc831f43a81ada63f3f824f3
parentbbcf467dab42ea3c85f368df346c82af2fbba665
[TIPC] Fixed sk_buff panic caused by tipc_link_bundle_buf (REVISED)

The recent change to direct inspection of bundle buffer tailroom did not
account for the possiblity of unrequested tailroom added by skb_alloc(),
thereby allowing a bundle to be created that exceeds the current link MTU.
An additional check now ensures that bundling works correctly no matter
if the bundle buffer is smaller, larger, or equal to the link MTU.

Signed-off-by: Allan Stephens <allan.stephens@windriver.com>
Signed-off-by: Per Liden <per.liden@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/tipc/core.h
net/tipc/link.c