Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Unverified Commit bdc417a8 authored by Jamie Bainbridge's avatar Jamie Bainbridge Committed by Harsh Shandilya
Browse files

ipv6: check raw payload size correctly in ioctl



commit 105f5528b9bbaa08b526d3405a5bcd2ff0c953c8 upstream.

In situations where an skb is paged, the transport header pointer and
tail pointer can be the same because the skb contents are in frags.

This results in ioctl(SIOCINQ/FIONREAD) incorrectly returning a
length of 0 when the length to receive is actually greater than zero.

skb->len is already correctly set in ip6_input_finish() with
pskb_pull(), so use skb->len as it always returns the correct result
for both linear and paged data.

Signed-off-by: default avatarJamie Bainbridge <jbainbri@redhat.com>
Signed-off-by: default avatarWilly Tarreau <w@1wt.eu>
parent bfa67380
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment