mirror of
https://git.yoctoproject.org/meta-ti
synced 2026-07-16 22:38:04 +00:00
Koen Kooi
9bc77dff5f
Regenerate all beaglebone patches and add one vfs tracer patch for powertop Signed-off-by: Koen Kooi <koen@dominion.thruhere.net> Signed-off-by: Denys Dmytriyenko <denys@ti.com>
43 lines
1.6 KiB
Diff
43 lines
1.6 KiB
Diff
From 124c9eb2772ae36b2a2d9afa510976cc38a497ef Mon Sep 17 00:00:00 2001
|
|
From: Antonio Quartulli <ordex@autistici.org>
|
|
Date: Fri, 29 Jun 2012 22:58:03 +0200
|
|
Subject: [PATCH 26/46] batman-adv: fix skb->data assignment
|
|
|
|
commit 2c995ff892313009e336ecc8ec3411022f5b1c39 upstream.
|
|
|
|
skb_linearize(skb) possibly rearranges the skb internal data and then changes
|
|
the skb->data pointer value. For this reason any other pointer in the code that
|
|
was assigned skb->data before invoking skb_linearise(skb) must be re-assigned.
|
|
|
|
In the current tt_query message handling code this is not done and therefore, in
|
|
case of skb linearization, the pointer used to handle the packet header ends up
|
|
in pointing to free'd memory.
|
|
|
|
This bug was introduced by a73105b8d4c765d9ebfb664d0a66802127d8e4c7
|
|
(batman-adv: improved client announcement mechanism)
|
|
|
|
Signed-off-by: Antonio Quartulli <ordex@autistici.org>
|
|
Signed-off-by: David S. Miller <davem@davemloft.net>
|
|
[This patch is a backport for kernel versions 3.1 and 3.2 - Antonio]
|
|
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
|
|
---
|
|
net/batman-adv/routing.c | 2 ++
|
|
1 file changed, 2 insertions(+)
|
|
|
|
diff --git a/net/batman-adv/routing.c b/net/batman-adv/routing.c
|
|
index f961cc5..da587ad 100644
|
|
--- a/net/batman-adv/routing.c
|
|
+++ b/net/batman-adv/routing.c
|
|
@@ -619,6 +619,8 @@ int recv_tt_query(struct sk_buff *skb, struct hard_iface *recv_if)
|
|
/* packet needs to be linearized to access the TT changes */
|
|
if (skb_linearize(skb) < 0)
|
|
goto out;
|
|
+ /* skb_linearize() possibly changed skb->data */
|
|
+ tt_query = (struct tt_query_packet *)skb->data;
|
|
|
|
if (is_my_mac(tt_query->dst))
|
|
handle_tt_response(bat_priv, tt_query);
|
|
--
|
|
1.7.10
|
|
|