From: Jamie Bainbridge <jbain...@redhat.com> Date: Wed, 26 Apr 2017 10:43:27 +1000
> In situations where an skb is paged, the transport header pointer and > tail pointer can be the same because the skb contents are in frags. > > This results in ioctl(SIOCINQ/FIONREAD) incorrectly returning a > length of 0 when the length to receive is actually greater than zero. > > skb->len is already correctly set in ip6_input_finish() with > pskb_pull(), so use skb->len as it always returns the correct result > for both linear and paged data. > > Signed-off-by: Jamie Bainbridge <jbain...@redhat.com> Applied and queued up for -stable, thanks.