Jon Paul Maloy 999417549c tipc: clear 'next'-pointer of message fragments before reassembly ... If the 'next' pointer of the last fragment buffer in a message is not zeroed before reassembly, we risk ending up with a corrupt message, since the reassembly function itself isn't doing this. Currently, when a buffer is retrieved from the deferred queue of the broadcast link, the next pointer is not cleared, with the result as described above. This commit corrects this, and thereby fixes a bug that may occur when long broadcast messages are transmitted across dual interfaces. The bug has been present since 40ba3cdf54 ("tipc: message reassembly using fragment chain") This commit should be applied to both net and net-next. Signed-off-by: Jon Maloy <jon.maloy@ericsson.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2014-07-11 15:02:10 -07:00
..
addr.c	tipc: compress out gratuitous extra carriage returns	2012-04-30 15:53:56 -04:00
addr.h	tipc: explicitly include core.h in addr.h	2014-02-13 17:49:13 -05:00
bcast.c	tipc: clear 'next'-pointer of message fragments before reassembly	2014-07-11 15:02:10 -07:00
bcast.h	tipc: avoid to asynchronously reset all links	2014-05-05 17:26:45 -04:00
bearer.c	tipc: improve and extend media address conversion functions	2014-05-14 15:19:48 -04:00
bearer.h	tipc: improve and extend media address conversion functions	2014-05-14 15:19:48 -04:00
config.c	tipc: convert allocations of global variables associated with bclink	2014-05-05 17:26:45 -04:00
config.h	tipc: obsolete the remote management feature	2014-03-27 13:08:36 -04:00
core.c	tipc: decrease connection flow control window	2014-05-14 15:19:47 -04:00
core.h	tipc: improve and extend media address conversion functions	2014-05-14 15:19:48 -04:00
discover.c	tipc: clean up neigbor discovery message reception	2014-05-14 15:19:48 -04:00
discover.h	tipc: fix race in disc create/delete	2014-04-22 21:17:53 -04:00
eth_media.c	tipc: improve and extend media address conversion functions	2014-05-14 15:19:48 -04:00
ib_media.c	tipc: improve and extend media address conversion functions	2014-05-14 15:19:48 -04:00
Kconfig	tipc: add InfiniBand media type	2013-04-17 14:18:33 -04:00
link.c	tipc: merge port message reception into socket reception function	2014-05-14 15:19:48 -04:00
link.h	tipc: rename and move message reassembly function	2014-05-14 15:19:48 -04:00
log.c	tipc: remove print_buf and deprecated log buffer code	2012-07-13 19:34:43 -04:00
Makefile	tipc: purge signal handler infrastructure	2014-05-05 17:26:45 -04:00
msg.c	tipc: fix bug in multicast/broadcast message reassembly	2014-07-08 15:55:09 -07:00
msg.h	tipc: rename and move message reassembly function	2014-05-14 15:19:48 -04:00
name_distr.c	tipc: avoid to asynchronously deliver name tables to peer node	2014-05-05 17:26:44 -04:00
name_distr.h	tipc: avoid to asynchronously deliver name tables to peer node	2014-05-05 17:26:44 -04:00
name_table.c	tipc: fix memory leak of publications	2014-04-30 13:31:26 -04:00
name_table.h	tipc: cosmetic realignment of function arguments	2013-06-17 15:53:01 -07:00
net.c	tipc: merge port message reception into socket reception function	2014-05-14 15:19:48 -04:00
net.h	tipc: convert allocations of global variables associated with bclink	2014-05-05 17:26:45 -04:00
netlink.c	net: Use netlink_ns_capable to verify the permisions of netlink messages	2014-04-24 13:44:54 -04:00
node_subscr.c	tipc: avoid to asynchronously notify subscriptions	2014-05-05 17:26:44 -04:00
node_subscr.h	tipc: avoid to asynchronously notify subscriptions	2014-05-05 17:26:44 -04:00
node.c	tipc: rename and move message reassembly function	2014-05-14 15:19:48 -04:00
node.h	tipc: rename and move message reassembly function	2014-05-14 15:19:48 -04:00
port.c	tipc: merge port message reception into socket reception function	2014-05-14 15:19:48 -04:00
port.h	tipc: merge port message reception into socket reception function	2014-05-14 15:19:48 -04:00
ref.c	tipc: eliminate redundant lookups in registry	2014-03-12 15:53:49 -04:00
ref.h	tipc: eliminate redundant lookups in registry	2014-03-12 15:53:49 -04:00
server.c	net: Fix use after free by removing length arg from sk_data_ready callbacks.	2014-04-11 16:15:36 -04:00
server.h	tipc: remove all enabled flags from all tipc components	2014-02-22 00:00:15 -05:00
socket.c	tipc: fix potential bug in function tipc_backlog_rcv	2014-06-11 15:01:30 -07:00
socket.h	tipc: merge port message reception into socket reception function	2014-05-14 15:19:48 -04:00
subscr.c	tipc: fix spinlock recursion bug for failed subscriptions	2014-03-24 15:36:56 -04:00
subscr.h	tipc: cosmetic realignment of function arguments	2013-06-17 15:53:01 -07:00
sysctl.c	tipc: change socket buffer overflow control to respect sk_rcvbuf	2013-06-17 15:53:00 -07:00