]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 96badbf) | patch
net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 30 Apr 2019 10:44:19 +0000 (13:44 +0300)
committerDavid S. Miller <davem@davemloft.net>
Tue, 30 Apr 2019 15:02:37 +0000 (11:02 -0400)
commitc76eede715b5d352715cb47c5c9654a2a1ad7610
tree983664237abc90e605ef1ba16230d74132d8f6cdtree | snapshot
parent96badbf4a51b95fdb2c470e3f99c83edd8035f90commit | diff
net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc

The "fs->location" is a u32 that comes from the user in ethtool_set_rxnfc().
We can't pass unclamped values to test_bit() or it results in an out of
bounds access beyond the end of the bitmap.

Fixes: 8d74278c0f50 ("net: dsa: bcm_sf2: Add support for ethtool::rxnfc")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/dsa/bcm_sf2_cfp.c diff | blob | history
Linux Kernel Source Tree.