diff options
| author | David S. Miller <davem@davemloft.net> | 2006-01-20 04:31:34 -0800 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@suse.de> | 2006-01-30 22:13:18 -0800 |
| commit | 4f0ae08d5897f3bd66612d568081392c8dd9eeb1 (patch) | |
| tree | 7d8eeb030123bd81a144fc239fd7692e75cf303e | |
| parent | d93f4eb4134d693be834627d31cd7c4aac427911 (diff) | |
[PATCH] Make second arg to skb_reserved() signed.
Some subsystems, such as PPP, can send negative values
here. It just happened to work correctly on 32-bit with
an unsigned value, but on 64-bit this explodes.
Figured out by Paul Mackerras based upon several PPP crash
reports.
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
| -rw-r--r-- | include/linux/skbuff.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/include/linux/skbuff.h b/include/linux/skbuff.h index 8c5d6001a923..c461bc54b0c8 100644 --- a/include/linux/skbuff.h +++ b/include/linux/skbuff.h @@ -927,7 +927,7 @@ static inline int skb_tailroom(const struct sk_buff *skb) * Increase the headroom of an empty &sk_buff by reducing the tail * room. This is only allowed for an empty buffer. */ -static inline void skb_reserve(struct sk_buff *skb, unsigned int len) +static inline void skb_reserve(struct sk_buff *skb, int len) { skb->data += len; skb->tail += len; |