[DCCP] Ackvec: fix soft lockup in ackvec handling code
authorAndrea Bittau <a.bittau@cs.ucl.ac.uk>
Mon, 12 Jun 2006 03:58:33 +0000 (20:58 -0700)
committerDavid S. Miller <davem@sunset.davemloft.net>
Mon, 12 Jun 2006 04:08:03 +0000 (21:08 -0700)
A soft lockup existed in the handling of ack vector records.
Specifically, when a tail of the list of ack vector records was
removed, it was possible to end up iterating infinitely on an element
of the tail.

Signed-off-by: Andrea Bittau <a.bittau@cs.ucl.ac.uk>
Signed-off-by: Ian McDonald <ian.mcdonald@jandi.co.nz>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/dccp/ackvec.c

index b5981e5f6b0021294d9c16d14f581964a9e93bc2..8c211c58893b2a6de115110743ed33a88befbe4d 100644 (file)
@@ -452,6 +452,7 @@ found:
                                              (unsigned long long)
                                              avr->dccpavr_ack_ackno);
                                dccp_ackvec_throw_record(av, avr);
+                               break;
                        }
                        /*
                         * If it wasn't received, continue scanning... we might