net: remove dead code after sk_data_ready change

As a followup to commit 676d23690fb ("net: Fix use after free by
removing length arg from sk_data_ready callbacks"), we can remove
some useless code in sock_queue_rcv_skb() and rxrpc_queue_rcv_skb()

Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2 files changed, 1 insertions, 16 deletions

diff --git a/net/core/sock.c b/net/core/sock.c
index 2714811afbd8..f7f2352200ad 100644
--- a/net/core/sock.c
+++ b/net/core/sock.c
@@ -437,7 +437,6 @@ static void sock_disable_timestamp(struct sock *sk, unsigned long flags)
 int sock_queue_rcv_skb(struct sock *sk, struct sk_buff *skb)
 {
         int err;
-        int skb_len;
         unsigned long flags;
         struct sk_buff_head *list = &sk->sk_receive_queue;
 
@@ -459,13 +458,6 @@ int sock_queue_rcv_skb(struct sock *sk, struct sk_buff *skb)
         skb->dev = NULL;
         skb_set_owner_r(skb, sk);
 
-        /* Cache the SKB length before we tack it onto the receive
-         * queue.  Once it is added it no longer belongs to us and
-         * may be freed by other threads of control pulling packets
-         * from the queue.
-         */
-        skb_len = skb->len;
-
         /* we escape from rcu protected region, make sure we dont leak
          * a norefcounted dst
          */
diff --git a/net/rxrpc/ar-input.c b/net/rxrpc/ar-input.c
index 63b21e580de9..481f89f93789 100644
--- a/net/rxrpc/ar-input.c
+++ b/net/rxrpc/ar-input.c
@@ -45,7 +45,7 @@ int rxrpc_queue_rcv_skb(struct rxrpc_call *call, struct sk_buff *skb,
         struct rxrpc_skb_priv *sp;
         struct rxrpc_sock *rx = call->socket;
         struct sock *sk;
-        int skb_len, ret;
+        int ret;
 
         _enter(",,%d,%d", force, terminal);
 
@@ -101,13 +101,6 @@ int rxrpc_queue_rcv_skb(struct rxrpc_call *call, struct sk_buff *skb,
                         rx->interceptor(sk, call->user_call_ID, skb);
                         spin_unlock_bh(&sk->sk_receive_queue.lock);
                 } else {
-
-                        /* Cache the SKB length before we tack it onto the
-                         * receive queue.  Once it is added it no longer
-                         * belongs to us and may be freed by other threads of
-                         * control pulling packets from the queue */
-                        skb_len = skb->len;
-
                         _net("post skb %p", skb);
                         __skb_queue_tail(&sk->sk_receive_queue, skb);
                         spin_unlock_bh(&sk->sk_receive_queue.lock);