Yi Zou 4c40dbe524 libfc: Fix frags in frame exceeding SKB_MAX_FRAGS in fc_fcp_send_data ... commit d37322a43e upstream. In case of sequence offload, in fc_fcp_send_data(), the skb_fill_page_info() called may end up adding more frags to the skb_shinfo(fp_skb(fp))->frags[], exceeding SKB_MAX_FRAGS, this eventually corrupts the memory. I am adding the FR_FRAME_SG_LEN back, but as SKB_MAX_FRAGS -1, leaving 1 for our fcoe_eof_crc page. And send will be broken into multiple large sends if the frame already contains more frags than skb handle. Signed-off-by: Yi Zou <yi.zou@intel.com> Signed-off-by: Robert Love <robert.w.love@intel.com> Signed-off-by: James Bottomley <James.Bottomley@suse.de> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>		2010-01-28 15:01:36 -08:00
..
acpi	ACPI: don't cond_resched if irq is disabled	2010-01-28 15:00:26 -08:00
asm-generic	fcntl: rename F_OWNER_GID to F_OWNER_PGRP	2009-11-17 17:40:33 -08:00
crypto
drm	drm: remove address mask param for drm_pci_alloc()	2010-01-18 10:19:23 -08:00
keys
linux	HID: fixup quirk for NCR devices	2010-01-28 15:01:20 -08:00
math-emu
media
mtd
net	netfilter: fix crashes in bridge netfilter caused by fragment jumps	2010-01-06 15:04:40 -08:00
pcmcia	PM / yenta: Split resume into early and late parts (rev. 4)	2009-11-03 10:54:58 +01:00
rdma
rxrpc
scsi	libfc: Fix frags in frame exceeding SKB_MAX_FRAGS in fc_fcp_send_data	2010-01-28 15:01:36 -08:00
sound
trace	tracing: Fix event format export	2009-12-18 14:05:16 -08:00
video	davinci-fb-frame-buffer-driver-for-ti-da8xx-omap-l1xx-v4	2009-09-23 07:39:51 -07:00
xen
Kbuild