[PATCH] tipc: reinitialize pointer after skb linearize

From: Erik Hugne The msg pointer into header may change after skb linearization. We must reinitialize it after calling skb_linearize to prevent operating on a freed or invalid pointer. Signed-off-by: Erik Hugne Reported-by: Tamás Végh --- net/tipc/msg.c | 1 + 1 file changed, 1 insertion(+)

[PATCH] tipc: disconnect socket directly after probe failure

From: Erik Hugne If the TIPC connection timer expires in a probing state, a self abort message is supposed to be generated and delivered to the local socket. This is currently broken, and the abort message is actually sent out to the peer node with invalid addressing information. This will cause