Re: [patch] bug prematurely setting nr_frags

[kuznet@xxxxxxxxxxxxx]

Hello!

> Ah, I see.  Care for a patch to remove it altogether then?

Well, someone wrote it for some purpose. :-) 


>                                                         As for the 
> bug, does anyone else see a place where nr_frags can be set without 
> initializing a page pointer? 

No. When does this happen?


> Otherwise it looks like a random memory corruption... what fun.

Well, even if this is corruption, it is unlikely to be random.
This maybe write beyond end of an skb, corrupting skb_shared_info.
At least, we had such place in netfilter fixed some time ago.

Alexey