From: Xin Long <[email protected]>
Date: Sun, 3 Mar 2019 16:50:26 +0800
> The user msg is also copied to the abort packet when doing SCTP_ABORT in
> sctp_sendmsg_check_sflags(). When SCTP_SENDALL is set, iov_iter_revert()
> should have been called for sending abort on the next asoc with copying
> this msg. Otherwise, memcpy_from_msg() in sctp_make_abort_user() will
> fail and return error.
>
> Fixes: 4910280503f3 ("sctp: add support for snd flag SCTP_SENDALL process in
> sendmsg")
> Reported-by: Ying Xu <[email protected]>
> Signed-off-by: Xin Long <[email protected]>
Applied and queued up for -stable.
