tipc: reinitialize pointer after skb linearize
authorErik Hugne <erik.hugne@ericsson.com>
Fri, 18 Sep 2015 08:46:31 +0000 (10:46 +0200)
committerDavid S. Miller <davem@davemloft.net>
Mon, 21 Sep 2015 05:31:20 +0000 (22:31 -0700)
commit4e3ae00100945d39e1f83b7c0179a114ccf55759
tree0d911950c7ea216376f756cd1e4d33a7ce9ba449
parentaab0c0e62ec4af224d1b6b40fca65055d403400b
tipc: reinitialize pointer after skb linearize

The msg pointer into header may change after skb linearization.
We must reinitialize it after calling skb_linearize to prevent
operating on a freed or invalid pointer.

Signed-off-by: Erik Hugne <erik.hugne@ericsson.com>
Reported-by: Tamás Végh <tamas.vegh@ericsson.com>
Acked-by: Ying Xue <ying.xue@windriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/tipc/msg.c