projects / GitHub / LineageOS / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: be12159) | patch
mlx4_en: Fix read buffer overflow in mlx4_en_complete_rx_desc()
authorroel kluin <roel.kluin@gmail.com>
Sat, 8 Aug 2009 23:54:21 +0000 (23:54 +0000)
committerDavid S. Miller <davem@davemloft.net>
Mon, 10 Aug 2009 04:47:01 +0000 (21:47 -0700)
commit973507cb8610d4c84f090d5f1f0ca54fa0559d27
tree5d372cd2c7263065ccf318cc62ff01ddda0d0226tree | snapshot (tar.gz zip)
parentbe12159b24c532b4b48bdec5a543336438faa132commit | diff
mlx4_en: Fix read buffer overflow in mlx4_en_complete_rx_desc()

If the length is less or equal to frag_prefix_size in the first iteration
we write skb_frags_rx[-1] and read from priv->frag_info[-1]

Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/mlx4/en_rx.c diff | blob | blame | history