diff options
| author | Heng Qi <[email protected]> | 2023-01-31 08:50:04 +0000 |
|---|---|---|
| committer | Jakub Kicinski <[email protected]> | 2023-02-02 05:31:56 +0000 |
| commit | 981f14d42a7f1610292a1ef0f7cd00138fff361d (patch) | |
| tree | 43f4d15d7a4353b1ac99de3a16baaaf985dcc1eb /net/ipv6/tcp_ipv6.c | |
| parent | netlink: provide an ability to set default extack message (diff) | |
| download | kernel-981f14d42a7f1610292a1ef0f7cd00138fff361d.tar.gz kernel-981f14d42a7f1610292a1ef0f7cd00138fff361d.zip | |
virtio-net: fix possible unsigned integer overflow
When the single-buffer xdp is loaded and after xdp_linearize_page()
is called, *num_buf becomes 0 and (*num_buf - 1) may overflow into
a large integer in virtnet_build_xdp_buff_mrg(), resulting in
unexpected packet dropping.
Fixes: ef75cb51f139 ("virtio-net: build xdp_buff with multi buffers")
Signed-off-by: Heng Qi <[email protected]>
Reviewed-by: Xuan Zhuo <[email protected]>
Signed-off-by: Michael S. Tsirkin <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Jakub Kicinski <[email protected]>
Diffstat (limited to 'net/ipv6/tcp_ipv6.c')
0 files changed, 0 insertions, 0 deletions