AUDIT: Fix reported length of audit messages.

We were setting nlmsg_len to skb->len, but we should be subtracting
the size of the header.

From: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: David Woodhouse <dwmw2@infradead.org>

1 files changed, 1 insertions, 1 deletions

diff --git a/kernel/audit.c b/kernel/audit.c
index b86007da8a3f..2ddd1a2b66d0 100644
--- a/kernel/audit.c
+++ b/kernel/audit.c
@@ -488,7 +488,7 @@ static inline int audit_log_drain(struct audit_buffer *ab)
 
                 if (audit_pid) {
                         struct nlmsghdr *nlh = (struct nlmsghdr *)skb->data;
-                        nlh->nlmsg_len = skb->len;
+                        nlh->nlmsg_len = skb->len - sizeof(*nlh);
                         skb_get(skb); /* because netlink_* frees */
                         retval = netlink_unicast(audit_sock, skb, audit_pid,
                                                  MSG_DONTWAIT);