commit b4838d12e1f3cb48c2489a0b08733b5dbf848297
author Samuel Ortiz <sameo@linux.intel.com> Tue Apr 10 19:43:03 2012 +0200
committer John W. Linville <linville@tuxdriver.com> Wed Apr 11 15:09:33 2012 -0400
tree 45d6df434bb8235c42cbbe975ed58ee3d1e76319
parent 673f7786e205c87b5d978c62827b9a66d097bebb

NFC: Fix the LLCP Tx fragmentation loop

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>

net/nfc/llcp/commands.c

diff --git a/net/nfc/llcp/commands.c b/net/nfc/llcp/commands.c
index 7b76eb7..ef10ffc 100644
--- a/net/nfc/llcp/commands.c
+++ b/net/nfc/llcp/commands.c
@@ -474,7 +474,7 @@
 
 	while (remaining_len > 0) {
 
-		frag_len = min_t(u16, local->remote_miu, remaining_len);
+		frag_len = min_t(size_t, local->remote_miu, remaining_len);
 
 		pr_debug("Fragment %zd bytes remaining %zd",
 			 frag_len, remaining_len);
@@ -497,7 +497,7 @@
 		release_sock(sk);
 
 		remaining_len -= frag_len;
-		msg_ptr += len;
+		msg_ptr += frag_len;
 	}
 
 	kfree(msg_data);