git://ftp.safe.ca
/
safe
/
jmp
/
linux-2.6
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
| inline |
side by side
[PKT_SCHED] cls: Use rtnl registration interface
[safe/jmp/linux-2.6]
/
net
/
ieee80211
/
ieee80211_rx.c
diff --git
a/net/ieee80211/ieee80211_rx.c
b/net/ieee80211/ieee80211_rx.c
index
2b85494
..
59a765c
100644
(file)
--- a/
net/ieee80211/ieee80211_rx.c
+++ b/
net/ieee80211/ieee80211_rx.c
@@
-595,7
+595,7
@@
int ieee80211_rx(struct ieee80211_device *ieee, struct sk_buff *skb,
if (frag != 0)
flen -= hdrlen;
- if (
skb_tail_pointer(frag_skb)
+ flen > frag_skb->end) {
+ if (
frag_skb->tail
+ flen > frag_skb->end) {
printk(KERN_WARNING "%s: host decrypted and "
"reassembled frame did not fit skb\n",
dev->name);