9p: BUG before corrupting memory
authorSasha Levin <levinsasha928@gmail.com>
Mon, 11 Jun 2012 15:18:13 +0000 (10:18 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 22 Jun 2012 18:37:15 +0000 (11:37 -0700)
commiteef458cb6f020f165de00a5e284048be49e9ee27
tree215f347c4810812b00b5a3ce903584cdf0c1ef6e
parent9f138fc8bc57beedc154729260f909ff60490296
9p: BUG before corrupting memory

commit 5fcb08befaf57faa1b00e514915c1660252b8c26 upstream.

The BUG_ON() in pack_sg_list() would get triggered only one time after we've
corrupted some memory by sg_set_buf() into an invalid sg buffer.

I'm still working on figuring out why I manage to trigger that bug...

Signed-off-by: Sasha Levin <levinsasha928@gmail.com>
Signed-off-by: Eric Van Hensbergen <ericvh@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/9p/trans_virtio.c