diff options
| author |   Michal Schmidt <mschmidt@redhat.com> | 2016-04-29 11:06:50 +0200 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2016-05-01 20:59:43 -0400 |
| commit | 0b86a2a1e5807326f8eb44e9919d0baadeda3a69 (patch) | |
| tree | 404940448a1d0328d423331e1390b2e1fb545b28 /tools/perf/util/scripting-engines/trace-event-python.c | |
| parent | net/smscx5xx: use the device tree for mac address (diff) | |
| download | wireguard-linux-0b86a2a1e5807326f8eb44e9919d0baadeda3a69.tar.xz wireguard-linux-0b86a2a1e5807326f8eb44e9919d0baadeda3a69.zip | |
cxgb3: fix out of bounds read
An out of bounds read of 2 bytes was discovered in cxgb3 with KASAN.
t3_config_rss() expects both arrays it gets as parameters to have
terminators. setup_rss(), the caller, forgets to add a terminator to
one of the arrays. Thankfully the iteration in t3_config_rss() stops
anyway, but in the last iteration the check for the terminator
is an out of bounds read.
Add the missing terminator to rspq_map[].
Reported-by: Jan Stancek <jstancek@redhat.com>
Signed-off-by: Michal Schmidt <mschmidt@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'tools/perf/util/scripting-engines/trace-event-python.c')
0 files changed, 0 insertions, 0 deletions