| commit | 415ab35a441eca767d033a2702223e785b9d5190 | |
| author | Prasad J Pandit <pjp@fedoraproject.org> | |
| Wed, 24 Feb 2016 06:11:33 +0000 (24 11:41 +0530) | ||
| committer | Jason Wang <jasowang@redhat.com> | |
| Tue, 8 Mar 2016 07:34:09 +0000 (8 15:34 +0800) | ||
| tree | 5725cc8b07aefcaf7bc3d4894095e8fbae22086e | treesnapshot (tar.gz zip) |
| parent | 97556fe80e4f7252300b3498b3477fb4295153a3 | commitdiff |
net: ne2000: check ring buffer control registers
Ne2000 NIC uses ring buffer of NE2000_MEM_SIZE(49152)
bytes to process network packets. Registers PSTART & PSTOP
define ring buffer size & location. Setting these registers
to invalid values could lead to infinite loop or OOB r/w
access issues. Add check to avoid it.
Reported-by: Yang Hongke <yanghongke@huawei.com>
Tested-by: Yang Hongke <yanghongke@huawei.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>
Ne2000 NIC uses ring buffer of NE2000_MEM_SIZE(49152)
bytes to process network packets. Registers PSTART & PSTOP
define ring buffer size & location. Setting these registers
to invalid values could lead to infinite loop or OOB r/w
access issues. Add check to avoid it.
Reported-by: Yang Hongke <yanghongke@huawei.com>
Tested-by: Yang Hongke <yanghongke@huawei.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>
| hw/net/ne2000.c | diffblobblamehistory |