linux/drivers/net/ethernet/chelsio
Michal Schmidt 0b86a2a1e5 cxgb3: fix out of bounds read
An out of bounds read of 2 bytes was discovered in cxgb3 with KASAN.

t3_config_rss() expects both arrays it gets as parameters to have
terminators. setup_rss(), the caller, forgets to add a terminator to
one of the arrays. Thankfully the iteration in t3_config_rss() stops
anyway, but in the last iteration the check for the terminator
is an out of bounds read.

Add the missing terminator to rspq_map[].

Reported-by: Jan Stancek <jstancek@redhat.com>
Signed-off-by: Michal Schmidt <mschmidt@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2016-05-01 20:59:43 -04:00
..
cxgb chelsio: constify cphy_ops structures 2016-01-04 21:58:28 -05:00
cxgb3 cxgb3: fix out of bounds read 2016-05-01 20:59:43 -04:00
cxgb4 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2016-04-21 12:57:34 -07:00
cxgb4vf cxgb4vf: Set number of queues in pci probe only 2016-03-10 16:12:25 -05:00
Kconfig cxgb4: update Kconfig and Makefile 2016-03-22 00:25:06 -07:00
Makefile