diff options
| author | Mintz, Yuval <[email protected]> | 2016-10-29 14:04:35 +0000 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2016-10-30 00:51:46 +0000 |
| commit | 087892d29b75c025086d99b29d385a3dac0169fc (patch) | |
| tree | 89e4196468b2f6c5267d8c725651371b6a8948cc /net/switchdev/switchdev.c | |
| parent | net: phy: dp83848: add dp83822 PHY support (diff) | |
| download | kernel-087892d29b75c025086d99b29d385a3dac0169fc.tar.gz kernel-087892d29b75c025086d99b29d385a3dac0169fc.zip | |
qede: Fix out-of-bound fastpath memory access
Driver allocates a shadow array for transmitted SKBs with X entries;
That means valid indices are {0,...,X - 1}. [X == 8191]
Problem is the driver also uses X as a mask for a
producer/consumer in order to choose the right entry in the
array which allows access to entry X which is out of bounds.
To fix this, simply allocate X + 1 entries in the shadow array.
Signed-off-by: Yuval Mintz <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'net/switchdev/switchdev.c')
0 files changed, 0 insertions, 0 deletions