diff options
| author | Arthur Kiyanovski <akiyano@amazon.com> | 2020-03-17 09:06:41 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2020-03-17 21:24:23 -0700 |
| commit | 30623e1ed116bcd1785217d0a98eec643687e091 (patch) | |
| tree | 1114209c17300a10726665b802605100eaeb123e /kernel/sysctl_binary.c | |
| parent | e02ae6ed51be3d28923bfd318ae57000f5643da5 (diff) | |
net: ena: avoid memory access violation by validating req_id properly
Rx req_id is an index in struct ena_eth_io_rx_cdesc_base.
The driver should validate that the Rx req_id it received from
the device is in range [0, ring_size -1]. Failure to do so could
yield to potential memory access violoation.
The validation was mistakenly done when refilling
the Rx submission queue and not in Rx completion queue.
Fixes: ad974baef2a1 ("net: ena: add support for out of order rx buffers refill")
Signed-off-by: Noam Dagan <ndagan@amazon.com>
Signed-off-by: Arthur Kiyanovski <akiyano@amazon.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'kernel/sysctl_binary.c')
0 files changed, 0 insertions, 0 deletions