[NETLINK]: Fix infinite loops in synchronous netlink changes.

The qlen should continue to decrement, even if we
pop partially processed SKBs back onto the receive queue.

Signed-off-by: David S. Miller <davem@davemloft.net>

1 files changed, 3 insertions, 4 deletions

diff --git a/net/xfrm/xfrm_user.c b/net/xfrm/xfrm_user.c
index dab112f1dd8a..e8740a4a1d78 100644
--- a/net/xfrm/xfrm_user.c
+++ b/net/xfrm/xfrm_user.c
@@ -1018,14 +1018,13 @@ static void xfrm_netlink_rcv(struct sock *sk, int len)
                 if (qlen > skb_queue_len(&sk->sk_receive_queue))
                         qlen = skb_queue_len(&sk->sk_receive_queue);
 
-                while (qlen--) {
+                for (; qlen; qlen--) {
                         skb = skb_dequeue(&sk->sk_receive_queue);
                         if (xfrm_user_rcv_skb(skb)) {
-                                if (skb->len) {
+                                if (skb->len)
                                         skb_queue_head(&sk->sk_receive_queue,
                                                        skb);
-                                        qlen++;
-                                } else
+                                else
                                         kfree_skb(skb);
                                 break;
                         }