mirror of
https://github.com/torvalds/linux.git
synced 2024-11-28 07:01:32 +00:00
24ab54cb49
There's a bug in the Hitachi SuperH csum_partial_copy_generic() implementation. If the supplied length is 1 (and several alignment conditions are met), the function immediately branches to label 4. However, the assembly at label 4 expects the length to be stored in register r2. Since this has not occurred, subsequent behavior is undefined. This can cause bad payload checksums in TCP connections. I've fixed the problem by initializing register r2 prior to the branch instruction. Signed-off-by: Ollie Wild <aaw@rincewind.tv> Signed-off-by: Paul Mundt <lethal@linux-sh.org> |
||
|---|---|---|
| .. | ||
| checksum.S | ||
| delay.c | ||
| div64-generic.c | ||
| div64.S | ||
| Makefile | ||
| memchr.S | ||
| memcpy-sh4.S | ||
| memcpy.S | ||
| memmove.S | ||
| memset.S | ||
| strcasecmp.c | ||
| strlen.S | ||
| udivdi3.c | ||