| commit | c2cb511634012344e3d0fe49a037a33b12d8a98a | |
| author | Prasad J Pandit <pjp@fedoraproject.org> | |
| Wed, 11 Nov 2020 13:06:36 +0000 (11 18:36 +0530) | ||
| committer | Jason Wang <jasowang@redhat.com> | |
| Tue, 24 Nov 2020 02:40:17 +0000 (24 10:40 +0800) | ||
| tree | 0b71998362df59015bbbec927f336ff77e1b0491 | treesnapshot (tar.gz zip) |
| parent | 23895cbd82be95428e90168b12e925d0d3ca2f06 | commitdiff |
hw/net/e1000e: advance desc_offset in case of null descriptor
While receiving packets via e1000e_write_packet_to_guest() routine,
'desc_offset' is advanced only when RX descriptor is processed. And
RX descriptor is not processed if it has NULL buffer address.
This may lead to an infinite loop condition. Increament 'desc_offset'
to process next descriptor in the ring to avoid infinite loop.
Reported-by: Cheol-woo Myung <330cjfdn@gmail.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>
While receiving packets via e1000e_write_packet_to_guest() routine,
'desc_offset' is advanced only when RX descriptor is processed. And
RX descriptor is not processed if it has NULL buffer address.
This may lead to an infinite loop condition. Increament 'desc_offset'
to process next descriptor in the ring to avoid infinite loop.
Reported-by: Cheol-woo Myung <330cjfdn@gmail.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>
| hw/net/e1000e_core.c | diffblobblamehistory |