Give Linux a little bit credit, and allow a csum_offset which points

out of the SKB header area.

diff --git a/drivers/xen/netchannel2/recv_packet.c b/drivers/xen/netchannel2/recv_packet.c
index 33e71569a5b95e3d6c253d746c1d61c47300f40c..786e19e1ecc80e6a5a114aa8fcf843f6a2965717 100644 (file)
--- a/drivers/xen/netchannel2/recv_packet.c
+++ b/drivers/xen/netchannel2/recv_packet.c
@@ -203,7 +203,7 @@ void nc2_handle_packet_msg(struct netchannel2 *nc,
                         break;
                 default:
                         skb->ip_summed = CHECKSUM_PARTIAL;
-                        if (msg.csum_offset + 2 > skb_headlen(skb)) {
+                        if (msg.csum_offset + 2 > skb->len) {
                                 /* Whoops.  Assuming no bugs in our
                                    receive methods, the other end just
                                    requested checksum calculation