diff options
author | Yi Zou <yi.zou@intel.com> | 2009-10-21 16:27:58 -0700 |
---|---|---|
committer | James Bottomley <James.Bottomley@suse.de> | 2009-12-04 12:00:33 -0600 |
commit | d37322a43ebac79eef417149f5696390cf8872db (patch) | |
tree | 71538cfff1bc2bd82e744ece265e7e6c45c07c6f /sound | |
parent | [SCSI] fcoe: Use NETIF_F_FCOE_MTU flag to set up max frame size (lport->mfs) (diff) | |
download | linux-dev-d37322a43ebac79eef417149f5696390cf8872db.tar.xz linux-dev-d37322a43ebac79eef417149f5696390cf8872db.zip |
[SCSI] libfc: Fix frags in frame exceeding SKB_MAX_FRAGS in fc_fcp_send_data
In case of sequence offload, in fc_fcp_send_data(), the skb_fill_page_info()
called may end up adding more frags to the skb_shinfo(fp_skb(fp))->frags[],
exceeding SKB_MAX_FRAGS, this eventually corrupts the memory. I am adding the
FR_FRAME_SG_LEN back, but as SKB_MAX_FRAGS -1, leaving 1 for our fcoe_eof_crc
page. And send will be broken into multiple large sends if the frame already
contains more frags than skb handle.
Signed-off-by: Yi Zou <yi.zou@intel.com>
Signed-off-by: Robert Love <robert.w.love@intel.com>
Signed-off-by: James Bottomley <James.Bottomley@suse.de>
Diffstat (limited to 'sound')
0 files changed, 0 insertions, 0 deletions