diff options
author | Haiyang Zhang <[email protected]> | 2012-03-12 10:20:49 +0000 |
---|---|---|
committer | David S. Miller <[email protected]> | 2012-03-12 17:06:48 -0700 |
commit | ef31bef6216db76950c38f1993b45953402f4c63 (patch) | |
tree | 044be8b3a0a0f4cd365dbf107576a176bdeb0e0b /net/lapb/lapb_subr.c | |
parent | afd465030acb4098abcb6b965a5aebc7ea2209e0 (diff) |
net/hyperv: Fix data corruption in rndis_filter_receive()
Limiting the memcpy to be the sizeof(struct rndis_message) can truncate
the message if there are Per-Packet-Info or Out-of-Band data.
In my earlier patch (commit 45326342), the unnecessary kmap_atomic and
kunmap_atomic surrounding this memcpy have been removed because the memory
in the receive buffer is always mapped. This memcpy is not necessary
either. To fix the bug, I removed the memcpy.
Signed-off-by: Haiyang Zhang <[email protected]>
Reviewed-by: K. Y. Srinivasan <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'net/lapb/lapb_subr.c')
0 files changed, 0 insertions, 0 deletions