diff options
| author | David S. Miller <davem@nuts.ninka.net> | 2003-10-06 12:58:15 -0700 |
|---|---|---|
| committer | David S. Miller <davem@nuts.ninka.net> | 2003-10-06 12:58:15 -0700 |
| commit | ba0c53547c4f2f0ffadd7c339cf7cfdf0da19785 (patch) | |
| tree | 25b5d98f52f609c97e4d583a676fa14b4ae41935 /net/lapb/lapb_subr.c | |
| parent | 72570ff1d3499a7b05c78b7a9a15d4aec92dcd3f (diff) | |
[LAPB]: Fix packet handlers to be PKT_CAN_SHARE_SKB.
Diffstat (limited to 'net/lapb/lapb_subr.c')
| -rw-r--r-- | net/lapb/lapb_subr.c | 16 |
1 files changed, 14 insertions, 2 deletions
diff --git a/net/lapb/lapb_subr.c b/net/lapb/lapb_subr.c index 36e1769330e4..e1ae5fd7302d 100644 --- a/net/lapb/lapb_subr.c +++ b/net/lapb/lapb_subr.c @@ -107,8 +107,8 @@ int lapb_validate_nr(struct lapb_cb *lapb, unsigned short nr) * This routine is the centralised routine for parsing the control * information for the different frame formats. */ -void lapb_decode(struct lapb_cb *lapb, struct sk_buff *skb, - struct lapb_frame *frame) +int lapb_decode(struct lapb_cb *lapb, struct sk_buff *skb, + struct lapb_frame *frame) { frame->type = LAPB_ILLEGAL; @@ -118,6 +118,12 @@ void lapb_decode(struct lapb_cb *lapb, struct sk_buff *skb, skb->data[0], skb->data[1], skb->data[2]); #endif + /* We always need to look at 2 bytes, sometimes we need + * to look at 3 and those cases are handled below. + */ + if (!pskb_may_pull(skb, 2)) + return -1; + if (lapb->mode & LAPB_MLP) { if (lapb->mode & LAPB_DCE) { if (skb->data[0] == LAPB_ADDR_D) @@ -148,6 +154,8 @@ void lapb_decode(struct lapb_cb *lapb, struct sk_buff *skb, if (lapb->mode & LAPB_EXTENDED) { if (!(skb->data[0] & LAPB_S)) { + if (!pskb_may_pull(skb, 2)) + return -1; /* * I frame - carries NR/NS/PF */ @@ -159,6 +167,8 @@ void lapb_decode(struct lapb_cb *lapb, struct sk_buff *skb, frame->control[1] = skb->data[1]; skb_pull(skb, 2); } else if ((skb->data[0] & LAPB_U) == 1) { + if (!pskb_may_pull(skb, 2)) + return -1; /* * S frame - take out PF/NR */ @@ -206,6 +216,8 @@ void lapb_decode(struct lapb_cb *lapb, struct sk_buff *skb, skb_pull(skb, 1); } + + return 0; } /* |