forked from Minki/linux
0b86a2a1e5
An out of bounds read of 2 bytes was discovered in cxgb3 with KASAN. t3_config_rss() expects both arrays it gets as parameters to have terminators. setup_rss(), the caller, forgets to add a terminator to one of the arrays. Thankfully the iteration in t3_config_rss() stops anyway, but in the last iteration the check for the terminator is an out of bounds read. Add the missing terminator to rspq_map[]. Reported-by: Jan Stancek <jstancek@redhat.com> Signed-off-by: Michal Schmidt <mschmidt@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> |
||
---|---|---|
.. | ||
adapter.h | ||
ael1002.c | ||
aq100x.c | ||
common.h | ||
cxgb3_ctl_defs.h | ||
cxgb3_defs.h | ||
cxgb3_ioctl.h | ||
cxgb3_main.c | ||
cxgb3_offload.c | ||
cxgb3_offload.h | ||
firmware_exports.h | ||
l2t.c | ||
l2t.h | ||
Makefile | ||
mc5.c | ||
regs.h | ||
sge_defs.h | ||
sge.c | ||
t3_cpl.h | ||
t3_hw.c | ||
t3cdev.h | ||
version.h | ||
vsc8211.c | ||
xgmac.c |