From: David Howells Date: Thu, 16 Mar 2017 16:27:48 +0000 (+0000) Subject: afs: Fix an off-by-one error in afs_send_pages() X-Git-Tag: MMI-PSA29.97-13-9~5967^2~3 X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=445783d0ec173a52bef2e9b129de7d716a19b9fa;p=GitHub%2FMotorolaMobilityLLC%2Fkernel-slsi.git afs: Fix an off-by-one error in afs_send_pages() afs_send_pages() should only put the call into the AFS_CALL_AWAIT_REPLY state if it has sent all the pages - but the check it makes is incorrect and sometimes it will finish the loop early. Signed-off-by: David Howells --- diff --git a/fs/afs/rxrpc.c b/fs/afs/rxrpc.c index 22d26b369070..b12da6aa5412 100644 --- a/fs/afs/rxrpc.c +++ b/fs/afs/rxrpc.c @@ -315,7 +315,7 @@ static int afs_send_pages(struct afs_call *call, struct msghdr *msg) * packet as RxRPC might give us the reply before it * returns from sending the request. */ - if (first + nr >= last) + if (first + nr - 1 >= last) call->state = AFS_CALL_AWAIT_REPLY; ret = rxrpc_kernel_send_data(afs_socket, call->rxcall, msg, bytes);