virtio-net: drop NETIF_F_FRAGLIST
authorJason Wang <jasowang@redhat.com>
Wed, 5 Aug 2015 02:34:04 +0000 (10:34 +0800)
committerDavid S. Miller <davem@davemloft.net>
Fri, 7 Aug 2015 07:13:10 +0000 (00:13 -0700)
commit48900cb6af4282fa0fb6ff4d72a81aa3dadb5c39
tree88e6e94b088e0d2fdfa627b8f5f1683a184d4c17
parent4f7eb70f7be1099236670f36b2f1f90a63e29699
virtio-net: drop NETIF_F_FRAGLIST

virtio declares support for NETIF_F_FRAGLIST, but assumes
that there are at most MAX_SKB_FRAGS + 2 fragments which isn't
always true with a fraglist.

A longer fraglist in the skb will make the call to skb_to_sgvec overflow
the sg array, leading to memory corruption.

Drop NETIF_F_FRAGLIST so we only get what we can handle.

Cc: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>
Acked-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/virtio_net.c