]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
projects / thirdparty / kernel / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b130234) | patch
net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 30 Apr 2019 10:44:19 +0000 (13:44 +0300)
committerDavid S. Miller <davem@davemloft.net>
Tue, 30 Apr 2019 15:02:37 +0000 (11:02 -0400)
commitf949a12fd697479f68d99dc65e9bbab68ee49043
tree983664237abc90e605ef1ba16230d74132d8f6cdtree | snapshot
parentb13023421b5179413421333f602850914f6a7ad8commit | diff
net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc

The "fs->location" is a u32 that comes from the user in ethtool_set_rxnfc().
We can't pass unclamped values to test_bit() or it results in an out of
bounds access beyond the end of the bitmap.

Fixes: 7318166cacad ("net: dsa: bcm_sf2: Add support for ethtool::rxnfc")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/dsa/bcm_sf2_cfp.c diff | blob | blame | history
A mirror of Linus' kernel repository