tcp-repair: Handle zero-length data put in rcv queue
authorPavel Emelyanov <xemul@parallels.com>
Mon, 29 Oct 2012 05:05:33 +0000 (05:05 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 17 Nov 2012 21:18:53 +0000 (13:18 -0800)
commit3583fce0d7937bfbf9846928f5cd41e11b5e4538
tree6e1cfa59cfc0afc34a6ea67c5f4043c933b22c86
parent8d4948a7d059c2604bf24812c887f85dceba4d6d
tcp-repair: Handle zero-length data put in rcv queue

[ Upstream commit c454e6111d1ef4268fe98e87087216e51c2718c3 ]

When sending data into a tcp socket in repair state we should check
for the amount of data being 0 explicitly. Otherwise we'll have an skb
with seq == end_seq in rcv queue, but tcp doesn't expect this to happen
(in particular a warn_on in tcp_recvmsg shoots).

Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
Reported-by: Giorgos Mavrikas <gmavrikas@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/ipv4/tcp_input.c