xavi/android_kernel_m2note/drivers/net/ethernet/xilinx, branch ng-7.1.2Unnamed repository; edit this file 'description' to name the repository.
https://gitea.privatedns.org/xavi/android_kernel_m2note/atom?h=ng-7.1.22017-11-06T14:30:30+00:00net: xilinx_emaclite: fix receive buffer overflow2017-11-06T14:30:30+00:00Anssi Hannulaanssi.hannula@bitwise.fi2017-02-14T17:11:44+00:00urn:sha1:23bd1e13cf0428fb80b41fc189ddcff6b3d296e8
commit cd224553641848dd17800fe559e4ff5d208553e8 upstream.
xilinx_emaclite looks at the received data to try to determine the
Ethernet packet length but does not properly clamp it if
proto_type == ETH_P_IP or 1500 < proto_type <= 1518, causing a buffer
overflow and a panic via skb_panic() as the length exceeds the allocated
skb size.
Fix those cases.
Also add an additional unconditional check with WARN_ON() at the end.
Signed-off-by: Anssi Hannula <anssi.hannula@bitwise.fi>
Fixes: bb81b2ddfa19 ("net: add Xilinx emac lite device driver")
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Willy Tarreau <w@1wt.eu>
first commit2016-08-15T02:19:42+00:00Meizu OpenSourcepatchwork@meizu.com2016-08-15T02:19:42+00:00urn:sha1:d2e1446d81725c351dc73a03b397ce043fb18452