Ah. I see where we check the length now in r2net_advance_rx(). drivers/staging/zcache/ramster/tcp.c 1548 if (sc->sc_page_off - sizeof(struct r2net_msg) == 1549 be16_to_cpu(hdr->data_len)) { ^^^^^^^^^^^^^^^^^^^^^^^^^^ 1550 /* we can only get here once, the first time we read 1551 * the payload.. so set ret to progress if the handler 1552 * works out. after calling this the message is toast */ 1553 ret = r2net_process_message(sc, hdr); 1554 if (ret == 0) 1555 ret = 1; 1556 sc->sc_page_off = 0; 1557 } Thanks. regards, dan carpenter _______________________________________________ devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxx http://driverdev.linuxdriverproject.org/mailman/listinfo/devel