Dan Carpenter 39bd16df7c net: mvpp2: prevent buffer overflow in mvpp22_rss_ctx() ...

The "rss_context" variable comes from the user via  ethtool_get_rxfh().
It can be any u32 value except zero.  Eventually it gets passed to
mvpp22_rss_ctx() and if it is over MVPP22_N_RSS_TABLES (8) then it
results in an array overflow.

Fixes: 895586d5dc ("net: mvpp2: cls: Use RSS contexts to handle RSS tables")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2020-05-06 14:15:46 -07:00

..

Makefile

net: mvpp2: add a debugfs interface for the Header Parser

2018-07-16 00:10:00 -07:00

mvpp2_cls.c

net: rename flow_action_hw_stats_types* -> flow_action_hw_stats*

2020-03-17 21:12:39 -07:00

mvpp2_cls.h

net: mvpp2: cls: Add steering based on vlan Id and priority.

2019-06-18 22:26:05 -04:00

mvpp2_debugfs.c

mvpp2: no need to check return value of debugfs_create functions

2019-08-10 15:25:48 -07:00

mvpp2_main.c

net: mvpp2: prevent buffer overflow in mvpp22_rss_ctx()

2020-05-06 14:15:46 -07:00

mvpp2_prs.c

net: mvpp2: prs: Don't override the sign bit in SRAM parser shift

2019-06-28 14:44:03 -07:00

mvpp2_prs.h

net: mvpp2: debugfs: add hit counter stats for Header Parser entries

2018-07-16 00:10:01 -07:00

mvpp2.h

mvpp2: percpu buffers

2019-09-02 12:07:46 -07:00