Merge branch 'drm-core-next' of ../linux-2.6 into drm-next

1 files changed, 6 insertions, 1 deletions

diff --git a/net/unix/af_unix.c b/net/unix/af_unix.c
index fc3ebb906911..fc820cd75453 100644
--- a/net/unix/af_unix.c
+++ b/net/unix/af_unix.c
@@ -1074,6 +1074,8 @@ restart:
         err = -ECONNREFUSED;
         if (other->sk_state != TCP_LISTEN)
                 goto out_unlock;
+        if (other->sk_shutdown & RCV_SHUTDOWN)
+                goto out_unlock;
 
         if (unix_recvq_full(other)) {
                 err = -EAGAIN;
@@ -1501,6 +1503,7 @@ static int unix_stream_sendmsg(struct kiocb *kiocb, struct socket *sock,
         struct sk_buff *skb;
         int sent = 0;
         struct scm_cookie tmp_scm;
+        bool fds_sent = false;
 
         if (NULL == siocb->scm)
                 siocb->scm = &tmp_scm;
@@ -1562,12 +1565,14 @@ static int unix_stream_sendmsg(struct kiocb *kiocb, struct socket *sock,
                 size = min_t(int, size, skb_tailroom(skb));
 
                 memcpy(UNIXCREDS(skb), &siocb->scm->creds, sizeof(struct ucred));
-                if (siocb->scm->fp) {
+                /* Only send the fds in the first buffer */
+                if (siocb->scm->fp && !fds_sent) {
                         err = unix_attach_fds(siocb->scm, skb);
                         if (err) {
                                 kfree_skb(skb);
                                 goto out_err;
                         }
+                        fds_sent = true;
                 }
 
                 err = memcpy_fromiovec(skb_put(skb, size), msg->msg_iov, size);