Files
linux/net/ipv6
Jamie Bainbridge b1fc1b057b ipv6: check raw payload size correctly in ioctl
[ Upstream commit 105f5528b9 ]

In situations where an skb is paged, the transport header pointer and
tail pointer can be the same because the skb contents are in frags.

This results in ioctl(SIOCINQ/FIONREAD) incorrectly returning a
length of 0 when the length to receive is actually greater than zero.

skb->len is already correctly set in ip6_input_finish() with
pskb_pull(), so use skb->len as it always returns the correct result
for both linear and paged data.

Signed-off-by: Jamie Bainbridge <jbainbri@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-05-03 08:36:37 -07:00
..
2015-08-25 13:37:31 -07:00
2016-09-10 23:12:51 -07:00
2016-11-28 16:13:01 -05:00
2017-03-22 12:43:31 +01:00
2016-05-31 14:07:49 -07:00
2016-09-10 23:12:52 -07:00
2017-02-18 15:11:43 +01:00
2016-06-27 15:06:17 -04:00
2017-03-22 12:43:34 +01:00
2015-02-28 16:56:51 -05:00
2015-11-03 10:52:13 -05:00
2016-09-21 10:09:14 +02:00
2016-09-21 10:09:14 +02:00