6lowpan_rtnl: fix off by one while fragmentation
authorAlexander Aring <alex.aring@gmail.com>
Mon, 2 Jun 2014 11:21:58 +0000 (13:21 +0200)
committerDavid S. Miller <davem@davemloft.net>
Mon, 2 Jun 2014 17:39:42 +0000 (10:39 -0700)
This patch fix a off by one error while fragmentation. If the frag_cap
value is equal to skb_unprocessed value we need to stop the
fragmentation loop because the last fragment which has a size of
skb_unprocessed fits into the frag capability size.

This issue was introduced by commit d4b2816d67d6e07b2f27037f282d8db03a5829d7
("6lowpan: fix fragmentation").

Signed-off-by: Alexander Aring <alex.aring@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ieee802154/6lowpan_rtnl.c

index 9d57026fd9d5f017a9d3cdf9b0845984c1466ddd..fe6bd7a7108169138faf198fefcab7f3217e9c55 100644 (file)
@@ -328,7 +328,7 @@ lowpan_xmit_fragmented(struct sk_buff *skb, struct net_device *dev,
                                 __func__, frag_tag, skb_offset);
                        goto err;
                }
-       } while (skb_unprocessed >= frag_cap);
+       } while (skb_unprocessed > frag_cap);
 
        consume_skb(skb);
        return NET_XMIT_SUCCESS;