diff options
| author |   Peng Li <lipeng321@huawei.com> | 2019-07-04 22:04:28 +0800 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2019-07-05 15:39:38 -0700 |
| commit | 892951524647d593d9f5e540a56fef4e52b95c03 (patch) | |
| tree | c49b0b72c33729b4e41f42528f7e16c83461366e /drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | |
| parent | net: hns3: bitwise operator should use unsigned type (diff) | |
| download | linux-dev-892951524647d593d9f5e540a56fef4e52b95c03.tar.xz linux-dev-892951524647d593d9f5e540a56fef4e52b95c03.zip | |
net: hns3: set maximum length to resp_data_len for exceptional case
If HCLGE_MBX_MAX_RESP_DATA_SIZE > HCLGE_MBX_MAX_RESP_DATA_SIZE,
the memcpy will cause out of memory. So this patch just set
resp_data_len to the maximum length for this case.
Signed-off-by: Peng Li <lipeng321@huawei.com>
Signed-off-by: Huazhong Tan <tanhuazhong@huawei.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to '')
| -rw-r--r-- | drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c b/drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c index 9adeba931902..a38ac7cfe16b 100644 --- a/drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c +++ b/drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c @@ -29,6 +29,10 @@ static int hclge_gen_resp_to_vf(struct hclge_vport *vport, "PF fail to gen resp to VF len %d exceeds max len %d\n", resp_data_len, HCLGE_MBX_MAX_RESP_DATA_SIZE); + /* If resp_data_len is too long, set the value to max length + * and return the msg to VF + */ + resp_data_len = HCLGE_MBX_MAX_RESP_DATA_SIZE; } hclge_cmd_setup_basic_desc(&desc, HCLGEVF_OPC_MBX_PF_TO_VF, false); |