diff options
| author | Heng Qi <hengqi@linux.alibaba.com> | 2023-01-31 16:50:04 +0800 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2023-02-01 21:31:56 -0800 |
| commit | 981f14d42a7f1610292a1ef0f7cd00138fff361d (patch) | |
| tree | 43f4d15d7a4353b1ac99de3a16baaaf985dcc1eb /drivers/net/ethernet/intel/ice/ice_dcb_lib.c | |
| parent | 028fb19c6ba743ed308ba99ac325afa968795e0f (diff) | |
virtio-net: fix possible unsigned integer overflow
When the single-buffer xdp is loaded and after xdp_linearize_page()
is called, *num_buf becomes 0 and (*num_buf - 1) may overflow into
a large integer in virtnet_build_xdp_buff_mrg(), resulting in
unexpected packet dropping.
Fixes: ef75cb51f139 ("virtio-net: build xdp_buff with multi buffers")
Signed-off-by: Heng Qi <hengqi@linux.alibaba.com>
Reviewed-by: Xuan Zhuo <xuanzhuo@linux.alibaba.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Link: https://lore.kernel.org/r/20230131085004.98687-1-hengqi@linux.alibaba.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'drivers/net/ethernet/intel/ice/ice_dcb_lib.c')
0 files changed, 0 insertions, 0 deletions