mirror of
https://github.com/genesi/linux-legacy.git
synced 2026-05-17 15:28:31 +00:00
Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6
* master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6: [NETFILTER]: SNMP NAT: fix memory corruption [IRDA]: fixup type of ->lsap_state [IRDA]: fix 16/32 bit confusion [NET]: Fix "ntohl(ntohs" bugs [BNX2]: Use kmalloc instead of array [BNX2]: Fix bug in bnx2_nvram_write() [TG3]: Add some missing rx error counters
This commit is contained in:
@@ -210,7 +210,7 @@ static void ipcomp4_err(struct sk_buff *skb, u32 info)
|
||||
skb->h.icmph->code != ICMP_FRAG_NEEDED)
|
||||
return;
|
||||
|
||||
spi = ntohl(ntohs(ipch->cpi));
|
||||
spi = htonl(ntohs(ipch->cpi));
|
||||
x = xfrm_state_lookup((xfrm_address_t *)&iph->daddr,
|
||||
spi, IPPROTO_COMP, AF_INET);
|
||||
if (!x)
|
||||
|
||||
@@ -1003,12 +1003,12 @@ static unsigned char snmp_trap_decode(struct asn1_ctx *ctx,
|
||||
|
||||
return 1;
|
||||
|
||||
err_addr_free:
|
||||
kfree((unsigned long *)trap->ip_address);
|
||||
|
||||
err_id_free:
|
||||
kfree(trap->id);
|
||||
|
||||
err_addr_free:
|
||||
kfree((unsigned long *)trap->ip_address);
|
||||
|
||||
return 0;
|
||||
}
|
||||
|
||||
@@ -1126,11 +1126,10 @@ static int snmp_parse_mangle(unsigned char *msg,
|
||||
struct snmp_v1_trap trap;
|
||||
unsigned char ret = snmp_trap_decode(&ctx, &trap, map, check);
|
||||
|
||||
/* Discard trap allocations regardless */
|
||||
kfree(trap.id);
|
||||
kfree((unsigned long *)trap.ip_address);
|
||||
|
||||
if (!ret)
|
||||
if (ret) {
|
||||
kfree(trap.id);
|
||||
kfree((unsigned long *)trap.ip_address);
|
||||
} else
|
||||
return ret;
|
||||
|
||||
} else {
|
||||
|
||||
@@ -221,7 +221,7 @@ _decode_session4(struct sk_buff *skb, struct flowi *fl)
|
||||
if (pskb_may_pull(skb, xprth + 4 - skb->data)) {
|
||||
u16 *ipcomp_hdr = (u16 *)xprth;
|
||||
|
||||
fl->fl_ipsec_spi = ntohl(ntohs(ipcomp_hdr[1]));
|
||||
fl->fl_ipsec_spi = htonl(ntohs(ipcomp_hdr[1]));
|
||||
}
|
||||
break;
|
||||
default:
|
||||
|
||||
@@ -208,7 +208,7 @@ static void ipcomp6_err(struct sk_buff *skb, struct inet6_skb_parm *opt,
|
||||
if (type != ICMPV6_DEST_UNREACH && type != ICMPV6_PKT_TOOBIG)
|
||||
return;
|
||||
|
||||
spi = ntohl(ntohs(ipcomph->cpi));
|
||||
spi = htonl(ntohs(ipcomph->cpi));
|
||||
x = xfrm_state_lookup((xfrm_address_t *)&iph->daddr, spi, IPPROTO_COMP, AF_INET6);
|
||||
if (!x)
|
||||
return;
|
||||
|
||||
@@ -544,7 +544,8 @@ static void iriap_getvaluebyclass_response(struct iriap_cb *self,
|
||||
{
|
||||
struct sk_buff *tx_skb;
|
||||
int n;
|
||||
__u32 tmp_be32, tmp_be16;
|
||||
__u32 tmp_be32;
|
||||
__be16 tmp_be16;
|
||||
__u8 *fp;
|
||||
|
||||
IRDA_DEBUG(4, "%s()\n", __FUNCTION__);
|
||||
|
||||
@@ -62,7 +62,7 @@ int xfrm_parse_spi(struct sk_buff *skb, u8 nexthdr, u32 *spi, u32 *seq)
|
||||
case IPPROTO_COMP:
|
||||
if (!pskb_may_pull(skb, sizeof(struct ip_comp_hdr)))
|
||||
return -EINVAL;
|
||||
*spi = ntohl(ntohs(*(u16*)(skb->h.raw + 2)));
|
||||
*spi = htonl(ntohs(*(u16*)(skb->h.raw + 2)));
|
||||
*seq = 0;
|
||||
return 0;
|
||||
default:
|
||||
|
||||
Reference in New Issue
Block a user