From: Finn Thain <fthain@telegraphics.com.au>
Date: Wed, 29 Jan 2020 09:27:49 +0000 (+1100)
Subject: dp8393x: Don't clobber packet checksum
X-Git-Tag: v5.0.0-rc0~61^2~15
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=bae112b80c9c42cea21ee7623c283668c3451c2e;p=thirdparty%2Fqemu.git

dp8393x: Don't clobber packet checksum

A received packet consumes pkt_size bytes in the buffer and the frame
checksum that's appended to it consumes another 4 bytes. The Receive
Buffer Address register takes the former quantity into account but
not the latter. So the next packet written to the buffer overwrites
the frame checksum. Fix this.

Signed-off-by: Finn Thain <fthain@telegraphics.com.au>
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Tested-by: Laurent Vivier <laurent@vivier.eu>
Signed-off-by: Jason Wang <jasowang@redhat.com>
---

diff --git a/hw/net/dp8393x.c b/hw/net/dp8393x.c
index 911f59e0c91..63293411db9 100644
--- a/hw/net/dp8393x.c
+++ b/hw/net/dp8393x.c
@@ -818,6 +818,7 @@ static ssize_t dp8393x_receive(NetClientState *nc, const uint8_t * buf,
     address += rx_len;
     address_space_write(&s->as, address, MEMTXATTRS_UNSPECIFIED,
                         &checksum, 4);
+    address += 4;
     rx_len += 4;
     s->regs[SONIC_CRBA1] = address >> 16;
     s->regs[SONIC_CRBA0] = address & 0xffff;