diff options
| author | David S. Miller <davem@sunset.davemloft.net> | 2006-01-17 05:54:21 -0500 |
|---|---|---|
| committer | David S. Miller <davem@sunset.davemloft.net> | 2006-01-17 05:54:21 -0500 |
| commit | 8243126c5e29030bf1a3fb75187a513966dcba62 (patch) | |
| tree | 39750d44770efcdac150f041f71b7272c8da20f9 | |
| parent | f09484ff87f677056ce631aa3d8e486861501b51 (diff) | |
[NET]: Make second arg to skb_reserved() signed.
Some subsystems, such as PPP, can send negative values
here. It just happened to work correctly on 32-bit with
an unsigned value, but on 64-bit this explodes.
Figured out by Paul Mackerras based upon several PPP crash
reports.
Signed-off-by: David S. Miller <davem@davemloft.net>
| -rw-r--r-- | include/linux/skbuff.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/include/linux/skbuff.h b/include/linux/skbuff.h index e5fd66c5650b..ad7cc22bd424 100644 --- a/include/linux/skbuff.h +++ b/include/linux/skbuff.h | |||
| @@ -926,7 +926,7 @@ static inline int skb_tailroom(const struct sk_buff *skb) | |||
| 926 | * Increase the headroom of an empty &sk_buff by reducing the tail | 926 | * Increase the headroom of an empty &sk_buff by reducing the tail |
| 927 | * room. This is only allowed for an empty buffer. | 927 | * room. This is only allowed for an empty buffer. |
| 928 | */ | 928 | */ |
| 929 | static inline void skb_reserve(struct sk_buff *skb, unsigned int len) | 929 | static inline void skb_reserve(struct sk_buff *skb, int len) |
| 930 | { | 930 | { |
| 931 | skb->data += len; | 931 | skb->data += len; |
| 932 | skb->tail += len; | 932 | skb->tail += len; |
