diff options
| author |   Jia-Ju Bai <baijiaju1990@gmail.com> | 2020-05-30 10:41:50 +0800 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2020-06-01 11:52:59 -0700 |
| commit | 3e1c6846b9e108740ef8a37be80314053f5dd52a (patch) | |
| tree | 4c57ea55d26523b47401b18674b7ea1adf01fdf5 /tools/perf/scripts/python/export-to-postgresql.py | |
| parent | flow_dissector: work around stack frame size warning (diff) | |
| download | linux-rng-3e1c6846b9e108740ef8a37be80314053f5dd52a.tar.xz linux-rng-3e1c6846b9e108740ef8a37be80314053f5dd52a.zip | |
net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss()
The value adapter->rss_conf is stored in DMA memory, and it is assigned
to rssConf, so rssConf->indTableSize can be modified at anytime by
malicious hardware. Because rssConf->indTableSize is assigned to n,
buffer overflow may occur when the code "rssConf->indTable[n]" is
executed.
To fix this possible bug, n is checked after being used.
Signed-off-by: Jia-Ju Bai <baijiaju1990@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions