X-Git-Url: http://bbs.cooldavid.org/git/?a=blobdiff_plain;f=net%2Frds%2Fmessage.c;h=848cff45183bb3ef9fc52864c952cba3903b17c3;hb=d139ff0907dac9ef72fb2cf301e345bac3aec42f;hp=a84545dae3709bc0140b65f8acd7648852d89935;hpb=fc8162e3c034af743d8def435fda6396603d321f;p=net-next-2.6.git

diff --git a/net/rds/message.c b/net/rds/message.c
index a84545dae37..848cff45183 100644
--- a/net/rds/message.c
+++ b/net/rds/message.c
@@ -224,6 +224,9 @@ struct scatterlist *rds_message_alloc_sgs(struct rds_message *rm, int nents)
 	WARN_ON(rm->m_used_sgs + nents > rm->m_total_sgs);
 	WARN_ON(!nents);
 
+	if (rm->m_used_sgs + nents > rm->m_total_sgs)
+		return NULL;
+
 	sg_ret = &sg_first[rm->m_used_sgs];
 	sg_init_table(sg_ret, nents);
 	rm->m_used_sgs += nents;
@@ -246,6 +249,8 @@ struct rds_message *rds_message_map_pages(unsigned long *page_addrs, unsigned in
 	rm->m_inc.i_hdr.h_len = cpu_to_be32(total_len);
 	rm->data.op_nents = ceil(total_len, PAGE_SIZE);
 	rm->data.op_sg = rds_message_alloc_sgs(rm, num_sgs);
+	if (!rm->data.op_sg)
+		return ERR_PTR(-ENOMEM);
 
 	for (i = 0; i < rm->data.op_nents; ++i) {
 		sg_set_page(&rm->data.op_sg[i],