aboutsummaryrefslogtreecommitdiffstats
path: root/net/core/dev.c
diff options
context:
space:
mode:
Diffstat (limited to 'net/core/dev.c')
-rw-r--r--net/core/dev.c11
1 files changed, 3 insertions, 8 deletions
diff --git a/net/core/dev.c b/net/core/dev.c
index e48c08af76a..6785b067ad5 100644
--- a/net/core/dev.c
+++ b/net/core/dev.c
@@ -2378,18 +2378,13 @@ void *skb_gro_header(struct sk_buff *skb, unsigned int hlen)
2378 unsigned int offset = skb_gro_offset(skb); 2378 unsigned int offset = skb_gro_offset(skb);
2379 2379
2380 hlen += offset; 2380 hlen += offset;
2381 if (hlen <= skb_headlen(skb)) 2381 if (unlikely(skb_headlen(skb) ||
2382 return skb->data + offset; 2382 skb_shinfo(skb)->frags[0].size < hlen ||
2383
2384 if (unlikely(!skb_shinfo(skb)->nr_frags ||
2385 skb_shinfo(skb)->frags[0].size <=
2386 hlen - skb_headlen(skb) ||
2387 PageHighMem(skb_shinfo(skb)->frags[0].page))) 2383 PageHighMem(skb_shinfo(skb)->frags[0].page)))
2388 return pskb_may_pull(skb, hlen) ? skb->data + offset : NULL; 2384 return pskb_may_pull(skb, hlen) ? skb->data + offset : NULL;
2389 2385
2390 return page_address(skb_shinfo(skb)->frags[0].page) + 2386 return page_address(skb_shinfo(skb)->frags[0].page) +
2391 skb_shinfo(skb)->frags[0].page_offset + 2387 skb_shinfo(skb)->frags[0].page_offset + offset;
2392 offset - skb_headlen(skb);
2393} 2388}
2394EXPORT_SYMBOL(skb_gro_header); 2389EXPORT_SYMBOL(skb_gro_header);
2395 2390