diff options
| author | David S. Miller <davem@sunset.davemloft.net> | 2006-01-19 19:53:02 -0500 |
|---|---|---|
| committer | David S. Miller <davem@sunset.davemloft.net> | 2006-01-19 19:53:02 -0500 |
| commit | cf9e50a920be24b734fb91f19b8844f8509cb981 (patch) | |
| tree | a077c31bcfe9844bcfa7ff1fe07364b5b7958622 /net/sctp/sm_statefuns.c | |
| parent | 0f36b018b2e314d45af86449f1a97facb1fbe300 (diff) | |
| parent | a7d1f1b66c05ef4ebb58a34be7caad9af15546a4 (diff) | |
Merge master.kernel.org:/pub/scm/linux/kernel/git/sridhar/lksctp-2.6
Diffstat (limited to 'net/sctp/sm_statefuns.c')
| -rw-r--r-- | net/sctp/sm_statefuns.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/net/sctp/sm_statefuns.c b/net/sctp/sm_statefuns.c index 477d7f80dba6..71c9a961c321 100644 --- a/net/sctp/sm_statefuns.c +++ b/net/sctp/sm_statefuns.c | |||
| @@ -3090,6 +3090,8 @@ sctp_disposition_t sctp_sf_ootb(const struct sctp_endpoint *ep, | |||
| 3090 | break; | 3090 | break; |
| 3091 | 3091 | ||
| 3092 | ch_end = ((__u8 *)ch) + WORD_ROUND(ntohs(ch->length)); | 3092 | ch_end = ((__u8 *)ch) + WORD_ROUND(ntohs(ch->length)); |
| 3093 | if (ch_end > skb->tail) | ||
| 3094 | break; | ||
| 3093 | 3095 | ||
| 3094 | if (SCTP_CID_SHUTDOWN_ACK == ch->type) | 3096 | if (SCTP_CID_SHUTDOWN_ACK == ch->type) |
| 3095 | ootb_shut_ack = 1; | 3097 | ootb_shut_ack = 1; |